diff --git a/.buildbot/openwrt/build.sh b/.buildbot/openwrt/build.sh
index d5aefa5..0e8c425 100755
--- a/.buildbot/openwrt/build.sh
+++ b/.buildbot/openwrt/build.sh
@@ -9,6 +9,8 @@
 # now I noticed there is actually a Makefile for openwrt in the repo already:
 # https://github.com/IchthysMaranatha/asterisk-chan-quectel/tree/master/openwrt
 
+set -x
+
 tar -xJf /Downloads/openwrt-sdk-${OPENWRT_VERSION}-*.tar.xz
 
 cp -r feed openwrt-sdk-*/
@@ -25,9 +27,12 @@ cat ${pwd}/feeds.conf >> feeds.conf
 make defconfig
 echo 'CONFIG_PACKAGE_python3-packages=y' >> .config
 echo 'CONFIG_PACKAGE_python3-packages-list="CherryPy==18.8.0"' >> .config
+# Enable collectd network encryption
+echo "CONFIG_PACKAGE_COLLECTD_ENCRYPTED_NETWORK=y" >> .config
 
 make package/python3-packages/compile
 make package/asterisk-chan-quectel/compile
+make package/collectd/compile
 # no signing key
 make package/index
 
@@ -44,8 +49,8 @@ cp ${sdkdir}/bin/packages/aarch64_cortex-a72/quectel/*.ipk packages/
 
 make info
 
-# Double the size of the root partition
-echo "CONFIG_TARGET_ROOTFS_PARTSIZE=208" >> .config
+# Increase the size of the root partition
+echo "CONFIG_TARGET_ROOTFS_PARTSIZE=308" >> .config
 # Disable ext4 images
 echo "CONFIG_TARGET_ROOTFS_EXT4FS=n" >> .config
 
@@ -69,7 +74,7 @@ PACKAGES="kmod-nf-nathelper-extra kmod-rtc-ds1307 \
 	  asterisk-chan-quectel \
 	  ca-certificates \
 	  collectd collectd-mod-contextswitch collectd-mod-cpu \
-	  collectd-mod-curl \
+	  collectd-mod-curl collectd-mod-df \
 	  collectd-mod-dhcpleases collectd-mod-disk \
 	  collectd-mod-dns collectd-mod-entropy \
 	  collectd-mod-ethstat collectd-mod-exec \
@@ -89,6 +94,8 @@ PACKAGES="kmod-nf-nathelper-extra kmod-rtc-ds1307 \
 	  luci-app-mwan3 luci-app-upnp \
 	  luci-ssl-nginx luci-app-acme \
 	  python3-packages python3-yaml \
+	  openssh-sftp-server tcpdump \
+	  iptables-nft ip6tables-nft \
 	  wireguard-tools wget-ssl \
 	 "