diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 0bc27849cc5a9c3fcc67cb241e77529a4c7840a9..6482fb05c8870bd5978eb5e792062fd3593f36fe 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,6 +3,7 @@ before_script:
 
 stages:
   - build
+  - sign
   - deploy
 
 ar71xx-generic:
@@ -19,6 +20,13 @@ ar71xx-nand:
   script:
     - bash build/build-ar71xx-generic.sh
     
+sign:
+  stage: deploy
+  tags:
+    - firmware
+  script:
+    - bash build/sign.sh
+    
 deploy:
   stage: deploy
   tags:
diff --git a/build/build-ar71xx-generic.sh b/build/build-ar71xx-generic.sh
index 8c4f6398fbc16797e34e34508b33992d837e1864..0e2b50b3afd4131ad33cab88215a94ecbdfdce47 100644
--- a/build/build-ar71xx-generic.sh
+++ b/build/build-ar71xx-generic.sh
@@ -1,24 +1,7 @@
 #!/bin/sh
 
-
 cpus=`nproc`
 
 make update
 
-rm -rf ./packages/ffnw
-
-git clone https://git.nordwest.freifunk.net/ffnw-firmware/packages.git ./packages/ffnw
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=ar71xx-generic
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=ar71xx-nand
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=mpc85xx-generic
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=x86-generic
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=x86-kvm_guest
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=x86-64
-
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=x86-xen_domu
\ No newline at end of file
+make -dkj $cpus GLUON_BRANCH=nightly GLUON_TARGET=ar71xx-generic
\ No newline at end of file
diff --git a/build/build-ar71xx-nand.sh b/build/build-ar71xx-nand.sh
index 0cc98f4f33b24eb33d6a873255e0d6ecd4f5bf49..be97d602efbd33d6fa4ff433b99e741ddabb318c 100644
--- a/build/build-ar71xx-nand.sh
+++ b/build/build-ar71xx-nand.sh
@@ -4,4 +4,4 @@ cpus=`nproc`
 
 make update
 
-make -dkj $cpus GLUON_BRANCH=stable GLUON_TARGET=ar71xx-nand
\ No newline at end of file
+make -dkj $cpus GLUON_BRANCH=nightly GLUON_TARGET=ar71xx-nand
\ No newline at end of file
diff --git a/build/sign.sh b/build/sign.sh
new file mode 100644
index 0000000000000000000000000000000000000000..7e459e9e65779334460cd016734544dc2d95ec2e
--- /dev/null
+++ b/build/sign.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+ECDSA_PRIVAT_KEY="d8b6b90da391e2b8fdf1fec1499539937a35abcea79f2c3c15ae2f9edb5c455f"
\ No newline at end of file