diff --git a/changelog.d/2-wire-builds/wsd-5.28 b/changelog.d/2-wire-builds/wsd-5.28
new file mode 100644
index 000000000..d923fb258
--- /dev/null
+++ b/changelog.d/2-wire-builds/wsd-5.28
@@ -0,0 +1 @@
+Changed: the wire-builds reference for 2026-q1 with 5.28 backend
diff --git a/changelog.d/2-wire-builds/wsd-5.29 b/changelog.d/2-wire-builds/wsd-5.29
new file mode 100644
index 000000000..eb87755fe
--- /dev/null
+++ b/changelog.d/2-wire-builds/wsd-5.29
@@ -0,0 +1 @@
+Added: testing 5.29.28 wire-builds
diff --git a/changelog.d/2-wire-builds/wsd-5.30.9 b/changelog.d/2-wire-builds/wsd-5.30.9
new file mode 100644
index 000000000..eb87755fe
--- /dev/null
+++ b/changelog.d/2-wire-builds/wsd-5.30.9
@@ -0,0 +1 @@
+Added: testing 5.29.28 wire-builds
diff --git a/changelog.d/3-deploy-builds/wire-server-5.27 b/changelog.d/3-deploy-builds/wire-server-5.27
new file mode 100644
index 000000000..eef103064
--- /dev/null
+++ b/changelog.d/3-deploy-builds/wire-server-5.27
@@ -0,0 +1 @@
+Added: update prod and demo example values/secrets for wire-server 5.27, aligning PostgreSQL config, postgresMigration (conversation, teamFeatures), rabbitmq, and mlsPrivateKeys across all services
diff --git a/offline/default-build/build.sh b/offline/default-build/build.sh
index 23e608dc6..a94855536 100755
--- a/offline/default-build/build.sh
+++ b/offline/default-build/build.sh
@@ -26,7 +26,7 @@ TASKS_DIR="${SCRIPT_DIR}/../tasks"
 # --------------------------
 
 # pulling the charts based on builds.json, charts to be skipped are passed as arguments HELM_CHART_EXCLUDE_LIST
-"${TASKS_DIR}"/proc_pull_charts.sh OUTPUT_DIR="${OUTPUT_DIR}" HELM_CHART_EXCLUDE_LIST="inbucket,wire-server-enterprise,postgresql"
+"${TASKS_DIR}"/proc_pull_charts.sh OUTPUT_DIR="${OUTPUT_DIR}" HELM_CHART_EXCLUDE_LIST="inbucket,wire-server-enterprise,postgresql,rust-sft,fluent-bit"
 
 # pulling the charts from helm-charts repo, charts to be included are passed as arguments HELM_CHART_INCLUDE_LIST
 # "${TASKS_DIR}"/proc_pull_ext_charts.sh OUTPUT_DIR="${OUTPUT_DIR}" HELM_CHART_INCLUDE_LIST="postgresql-external"
diff --git a/offline/tasks/proc_pull_charts.sh b/offline/tasks/proc_pull_charts.sh
index c069320c2..209107247 100755
--- a/offline/tasks/proc_pull_charts.sh
+++ b/offline/tasks/proc_pull_charts.sh
@@ -94,5 +94,5 @@ pull_charts() {
   #fi
 }
 
-wire_build="https://raw.githubusercontent.com/wireapp/wire-builds/pinned-offline-multi-20260224-142104/build.json"
+wire_build="https://raw.githubusercontent.com/wireapp/wire-builds/e30e9dfc61667adbca2d613c15fd525d3b815e0f/build.json"
 wire_build_chart_release "$wire_build" | pull_charts
diff --git a/values/sftd/demo-values.example.yaml b/values/sftd/demo-values.example.yaml
index 91dc2c885..566db6bc4 100644
--- a/values/sftd/demo-values.example.yaml
+++ b/values/sftd/demo-values.example.yaml
@@ -3,10 +3,6 @@ host: sftd.example.com
 replicaCount: 1
 joinCall:
   replicaCount: 1
-  image:
-    repository: docker.io/bitnamilegacy/nginx
-    pullPolicy: IfNotPresent
-    tag: "1.27.3-debian-12-r5"
 tls:
   issuerRef:
     name: letsencrypt-http01
diff --git a/values/sftd/prod-values.example.yaml b/values/sftd/prod-values.example.yaml
index 1c2374f9e..e93462308 100644
--- a/values/sftd/prod-values.example.yaml
+++ b/values/sftd/prod-values.example.yaml
@@ -14,10 +14,6 @@ joinCall:
 # this value should be set to 3 when deployed in a full production DMZ manner
 # replicaCount = 1 is to support the simple wiab-staging solution
   replicaCount: 1
-  image:
-    repository: docker.io/bitnamilegacy/nginx
-    pullPolicy: IfNotPresent
-    tag: "1.27.3-debian-12-r5"
 
 # Uncomment to enable SFT to SFT communication for federated calls
 # multiSFT:
diff --git a/values/wire-server/demo-values.example.yaml b/values/wire-server/demo-values.example.yaml
index 230fd6d7d..5a3e71a00 100644
--- a/values/wire-server/demo-values.example.yaml
+++ b/values/wire-server/demo-values.example.yaml
@@ -36,6 +36,8 @@ brig:
       port: "5432"
       user: wire-server
       dbname: wire-server
+    postgresqlPool:
+      size: 10 # adjust pool size as needed based on expected load and available resources
     useSES: false
     # Set to false if you want to hand out DynamoDB to store prekeys
     randomPrekeys: true
@@ -183,10 +185,14 @@ galley:
       port: "5432"
       user: wire-server
       dbname: wire-server
+    postgresqlPool:
+      size: 10 # adjust pool size as needed based on expected load and available resources
     # Explicitly set postgresMigration to cassandra for fresh deployments.
-    # This controls whether galley reads conversations from Cassandra or PostgreSQL.
+    # This controls whether galley reads conversations/teamFeatures from Cassandra or PostgreSQL.
     postgresMigration:
       conversation: cassandra
+      conversationCodes: cassandra
+      teamFeatures: cassandra
     enableFederation: false # Enable to use federation
     settings:
       # prefix URI used when inviting users to a conversation by link
@@ -366,13 +372,15 @@ background-worker:
       port: "5432"
       user: wire-server
       dbname: wire-server
-    # IMPORTANT: At Chart 5.25.0, the background-worker Helm chart incorrectly defaults
-    # postgresMigration.conversation to "postgresql" instead of "cassandra".
-    # This MUST be explicitly set to "cassandra" unless you have already migrated
-    # conversations to PostgreSQL. Without this override, User Group to Channel sync
-    # jobs will silently skip member synchronization.
+    postgresqlPool:
+      size: 5 # Background worker has fewer connections to DB, so smaller pool size is fine
     postgresMigration:
       conversation: cassandra
+      conversationCodes: cassandra
+      teamFeatures: cassandra
+    migrateConversations: false
+    migrateConversationCodes: false
+    migrateTeamFeatures: false
     # Enable for federation
     enableFederation: false
   metrics:
diff --git a/values/wire-server/prod-values.example.yaml b/values/wire-server/prod-values.example.yaml
index a0e8a2c67..c77923038 100644
--- a/values/wire-server/prod-values.example.yaml
+++ b/values/wire-server/prod-values.example.yaml
@@ -36,6 +36,8 @@ brig:
       port: "5432"
       user: wire-server
       dbname: wire-server
+    postgresqlPool:
+      size: 10 # adjust pool size as needed based on expected load and available resources
     useSES: false
     # Set to false if you want to hand out DynamoDB to store prekeys
     randomPrekeys: true
@@ -183,10 +185,14 @@ galley:
       port: "5432"
       user: wire-server
       dbname: wire-server
+    postgresqlPool:
+      size: 10 # adjust pool size as needed based on expected load and available resources
     # Explicitly set postgresMigration to cassandra for fresh deployments.
-    # This controls whether galley reads conversations from Cassandra or PostgreSQL.
+    # This controls whether galley reads conversations/teamFeatures from Cassandra or PostgreSQL.
     postgresMigration:
       conversation: cassandra
+      conversationCodes: cassandra
+      teamFeatures: cassandra
     enableFederation: false # Enable to use federation
     settings:
       # prefix URI used when inviting users to a conversation by link
@@ -366,13 +372,15 @@ background-worker:
       port: "5432"
       user: wire-server
       dbname: wire-server
-    # IMPORTANT: At Chart 5.25.0, the background-worker Helm chart incorrectly defaults
-    # postgresMigration.conversation to "postgresql" instead of "cassandra".
-    # This MUST be explicitly set to "cassandra" unless you have already migrated
-    # conversations to PostgreSQL. Without this override, User Group to Channel sync
-    # jobs will silently skip member synchronization.
+    postgresqlPool:
+      size: 5 # Background worker has fewer connections to DB, so smaller pool size is fine
     postgresMigration:
       conversation: cassandra
+      conversationCodes: cassandra
+      teamFeatures: cassandra
+    migrateConversations: false
+    migrateConversationCodes: false
+    migrateTeamFeatures: false
     # Enable for federation
     enableFederation: false
   metrics: