diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 1a35c96..be2c1e5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -176,15 +176,6 @@ run-setup-prodnso:
   only:
     - prodnso
 
-run-setup-prodwork01:
-  extends: .run-setup
-  environment: prodnso
-  resource_group: prodwork01
-  before_script:
-    - export STAGE=prodwork01
-    - echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
-  only:
-    - prodnso
 
 run-setup-demompmx:
   extends: .run-setup
@@ -526,35 +517,7 @@ run-patchday-all-k8s-prodnso:
   rules:
     - if: $CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH == "prodnso"
 
-run-patchday-all-prodwork01:
-  extends: .run-patchday
-  environment: prodnso
-  stage: run-patchday-all
-  resource_group: prodwork01
-  script:
-    - export STAGE=prodwork01
-    - export HETZNER_LABEL_SELECTOR="stage=${STAGE}"
-    - echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
-    - ansible-playbook -i stage-${STAGE}-netgo-hcloud.yml patchday.yml --vault-password-file=/tmp/vault-pass -u gitlabci --limit 'all:!k8s_cluster'
-  after_script:
-    - rm /tmp/vault-pass
-  rules:
-    - if: $CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH == "prodnso"
 
-run-patchday-all-k8s-prodwork01:
-  extends: .run-patchday
-  environment: prodnso
-  stage: run-patchday-all
-  resource_group: prodwork01
-  script:
-    - export STAGE=prodwork01
-    - export HETZNER_LABEL_SELECTOR="stage=${STAGE}"
-    - echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
-    - ansible-playbook -i stage-${STAGE}-netgo-hcloud.yml patchday.yml --vault-password-file=/tmp/vault-pass -u gitlabci --limit 'k8s_cluster'
-  after_script:
-    - rm /tmp/vault-pass
-  rules:
-    - if: $CI_PIPELINE_SOURCE == "schedule" && $CI_COMMIT_BRANCH == "prodnso"
 
 run-patchday-database-postgres-demompmx:
   extends: .run-patchday
@@ -660,15 +623,6 @@ run-hcloud-firewall-prodnso:
   only:
     - prodnso
 
-run-hcloud-firewall-prodwork01:
-  extends: .run-hcloud-firewall
-  environment: prodnso
-  resource_group: prodwork01
-  before_script:
-    - export STAGE=prodwork01
-    - echo "${ANSIBLE_VAULT_PASS_PRODWORK01}" > /tmp/vault-pass
-  only:
-    - prodnso
 
 run-hcloud-firewall-demompmx:
   extends: .run-hcloud-firewall