diff --git a/tasks/main.yml b/tasks/main.yml
index 22fbb34..58d4d97 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -12,3 +12,8 @@
 
 - name: Extract from secrets.tar.gz.enc
   shell: "openssl enc -aes-256-cbc -md md5 -pass env:SECRETS_ARCHIVE_PASSPHRASE -d -in {{ WORKDIR }}/secrets.tar.gz.enc | tar -zxv -C {{ WORKDIR }}"
+
+- name: Remove secrets.tar.gz.enc
+  ansible.builtin.file:
+    path: "{{ WORKDIR }}/secrets.tar.gz.enc"
+    state: absent