diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 929861f9..d8b9111c 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -594,7 +594,9 @@
       "Bash(./secubox-tools/repo-deploy.sh:*)",
       "Bash(./secubox-tools/quick-deploy.sh:*)",
       "Bash(while read f)",
-      "Bash(do basename \"$f\")"
+      "Bash(do basename \"$f\")",
+      "Bash(git rebase:*)",
+      "Bash(GIT_EDITOR=true git rebase:*)"
     ]
   }
 }
diff --git a/package/secubox/secubox-app-repo/Makefile b/package/secubox/secubox-app-repo/Makefile
index 90a40e30..893a2c14 100644
--- a/package/secubox/secubox-app-repo/Makefile
+++ b/package/secubox/secubox-app-repo/Makefile
@@ -53,11 +53,12 @@ define Package/secubox-app-repo/postinst
 	# Get device architecture
 	ARCH=$$(opkg print-architecture | grep -v 'all' | tail -1 | awk '{print $$2}')
 
-	# Configure opkg custom feed
+	# Configure opkg custom feed (use localhost since this device serves packages)
 	cat > /etc/opkg/customfeeds.conf << FEEDS
-# SecuBox Package Repository
-src/gz secubox_luci https://repo.secubox.in/luci/$${ARCH}
-src/gz secubox_packages https://repo.secubox.in/packages/$${ARCH}
+# SecuBox Package Repository (served locally)
+src/gz secubox_luci http://127.0.0.1:8888/luci/$${ARCH}
+src/gz secubox_packages http://127.0.0.1:8888/packages/$${ARCH}
+# Other devices use: https://repo.secubox.in/luci/$${ARCH}
 FEEDS
 
 	# Start services
diff --git a/secubox-tools/repo-deploy.sh b/secubox-tools/repo-deploy.sh
index da0eefa5..7f20c339 100755
--- a/secubox-tools/repo-deploy.sh
+++ b/secubox-tools/repo-deploy.sh
@@ -427,6 +427,15 @@ cmd_deploy() {
         rm -f "$archive"
     fi
 
+    # Sign packages on router (regenerates indexes with signatures)
+    log "Signing packages on router..."
+    if remote_exec "/usr/libexec/rpcd/luci.repo call refresh" >/dev/null 2>&1; then
+        log "Package indexes signed successfully"
+    else
+        log "Warning: Could not sign packages. Run manually:"
+        log "  /usr/libexec/rpcd/luci.repo call refresh"
+    fi
+
     log ""
     log "Deployment complete to $REPO_HOST:$REPO_PATH"
     log "Repository URL: https://repo.secubox.in/"