diff --git a/charts/ocis/ci/values.yaml b/charts/ocis/ci/values.yaml
index 476d4bc64..45ea1fcc3 100644
--- a/charts/ocis/ci/values.yaml
+++ b/charts/ocis/ci/values.yaml
@@ -21,7 +21,7 @@ image:
     - name: some-pull-secret
 nodeSelector:
   kubernetes.io/arch: "amd64"
-hostAliases: 
+hostAliases:
 - ip: "192.168.4.2"
   hostnames:
   - "example.kube.owncloud.test"
@@ -148,20 +148,6 @@ services:
       purgeExpiredTrashBinItems:
         enabled: true
 
-  store:
-    persistence:
-      enabled: true
-      storageClassName: default-storage
-      accessModes:
-        - ReadWriteMany
-      size: 5Gi
-      annotations:
-        anno-1: test
-      finalizers:
-        - kubernetes.io/pvc-protection
-      selectorLabels:
-        selector1: foobar
-
   thumbnails:
     persistence:
       enabled: true
diff --git a/charts/ocis/docs/values-desc-table.adoc b/charts/ocis/docs/values-desc-table.adoc
index c5bdd239f..f44112d74 100644
--- a/charts/ocis/docs/values-desc-table.adoc
+++ b/charts/ocis/docs/values-desc-table.adoc
@@ -3792,6 +3792,12 @@ a| [subs=-attributes]
 a| [subs=-attributes]
 `"example-bucket"`
 | S3 bucket to use for the S3NG driver. Only used if driver is set to "s3ng".
+| services.storageusers.storageBackend.driverConfig.s3ng.disableContentSHA256
+a| [subs=-attributes]
++bool+
+a| [subs=-attributes]
+`false`
+| Disable sending content sha256 when copying objects to S3.
 | services.storageusers.storageBackend.driverConfig.s3ng.endpoint
 a| [subs=-attributes]
 +string+
@@ -3810,144 +3816,48 @@ a| [subs=-attributes]
 a| [subs=-attributes]
 `"messagepack"`
 | Metadata backend to use for the S3NG storage driver. Valid values are: "messagepack", "xattrs".
-| services.storageusers.storageBackend.driverConfig.s3ng.region
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`"default"`
-| S3 region to use for the S3NG driver. Only used if driver is set to "s3ng".
-| services.storageusers.storageBackend.driverConfig.s3ng.secretKey
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`""`
-| S3 secret key to use for the S3NG driver. Only used if driver is set to "s3ng". DEPRECATION WARNING: These values will be removed in the future. Predefine `secretRefs.s3CredentialsSecretRef` instead.
-| services.store
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-see detailed service configuration options below
-| STORE service.
-| services.store.affinity
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-`{}`
-| Affinity settings for the store service. See the documentation of this setting in approvider for examples.
-| services.store.extraLabels
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-`{}`
-| Per-service custom labels
-| services.store.image.pullPolicy
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`nil`
-| Image pull policy
-| services.store.image.repository
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`""`
-| Image repository
-| services.store.image.sha
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`""`
-| Image sha / digest (optional).
-| services.store.image.tag
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`""`
-| Image tag.
-| services.store.nodeSelector
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-`{}`
-| Per-service nodeSelector configuration. Overrides the default setting from `nodeSelector` if set.
-| services.store.persistence
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-see detailed persistence configuration options below
-| Persistence settings.
-| services.store.persistence.accessModes
-a| [subs=-attributes]
-+list+
-a| [subs=-attributes]
-`["ReadWriteMany"]`
-| Persistent volume access modes. Needs to be `["ReadWriteMany"]` when scaling this service beyond one instance.
-| services.store.persistence.annotations
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-`{}`
-| Persistent volume annotations.
-| services.store.persistence.chownInitContainer
+| services.storageusers.storageBackend.driverConfig.s3ng.putObject.concurrentStreamParts
 a| [subs=-attributes]
 +bool+
 a| [subs=-attributes]
-`false`
-| Enables an initContainer to chown the volume. The initContainer is run as root. This is not needed if the driver applies the fsGroup from the securityContext. The image specified in `initContainerImage` will be used for this container.
-| services.store.persistence.claimName
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`""`
-| Use a custom name for the PVC instead of the default one.
-| services.store.persistence.enabled
+`true`
+| Always precreate parts when copying objects to S3.
+| services.storageusers.storageBackend.driverConfig.s3ng.putObject.disableMultipart
 a| [subs=-attributes]
 +bool+
 a| [subs=-attributes]
 `false`
-| Enables persistence. Needs to be enabled on production installations. If not enabled, pod restarts will lead to data loss. Also scaling this service beyond one instance is not possible if the service instances don't share the same storage.
-| services.store.persistence.existingClaim
-a| [subs=-attributes]
-+string+
-a| [subs=-attributes]
-`nil`
-| Use an existing PersistentVolumeClaim for persistence.
-| services.store.persistence.finalizers
+| Disable multipart uploads when copying objects to S3
+| services.storageusers.storageBackend.driverConfig.s3ng.putObject.numThreads
 a| [subs=-attributes]
-+list+
++int+
 a| [subs=-attributes]
-`["kubernetes.io/pvc-protection"]`
-| Persistent volume finalizers.
-| services.store.persistence.selectorLabels
+`4`
+| Number of concurrent uploads to use when copying objects to S3.
+| services.storageusers.storageBackend.driverConfig.s3ng.putObject.partSize
 a| [subs=-attributes]
-+object+
++int+
 a| [subs=-attributes]
-`{}`
-| Persistent volume selector labels.
-| services.store.persistence.size
+`0`
+| Part size for concurrent uploads to S3.
+| services.storageusers.storageBackend.driverConfig.s3ng.putObject.sendContentMD5
 a| [subs=-attributes]
-+string+
++bool+
 a| [subs=-attributes]
-`"5Gi"`
-| Size of the persistent volume.
-| services.store.persistence.storageClassName
+`true`
+| Send a Content-MD5 header when copying objects to S3.
+| services.storageusers.storageBackend.driverConfig.s3ng.region
 a| [subs=-attributes]
 +string+
 a| [subs=-attributes]
-`nil`
-| Storage class to use. Uses the default storage class if not set.
-| services.store.priorityClassName
+`"default"`
+| S3 region to use for the S3NG driver. Only used if driver is set to "s3ng".
+| services.storageusers.storageBackend.driverConfig.s3ng.secretKey
 a| [subs=-attributes]
 +string+
 a| [subs=-attributes]
 `""`
-| Per-service priorityClassName configuration. Overrides the default setting from `priorityClassName` if set.
-| services.store.resources
-a| [subs=-attributes]
-+object+
-a| [subs=-attributes]
-`{}`
-| Per-service resources configuration. Overrides the default setting from `resources` if set.
+| S3 secret key to use for the S3NG driver. Only used if driver is set to "s3ng". DEPRECATION WARNING: These values will be removed in the future. Predefine `secretRefs.s3CredentialsSecretRef` instead.
 | services.thumbnails
 a| [subs=-attributes]
 +object+
diff --git a/charts/ocis/docs/values.adoc.yaml b/charts/ocis/docs/values.adoc.yaml
index 0c5c367e6..698fdf14a 100644
--- a/charts/ocis/docs/values.adoc.yaml
+++ b/charts/ocis/docs/values.adoc.yaml
@@ -1804,6 +1804,19 @@ services:
           # -- S3 secret key to use for the S3NG driver. Only used if driver is set to "s3ng".
           # DEPRECATION WARNING: These values will be removed in the future. Predefine `secretRefs.s3CredentialsSecretRef` instead.
           secretKey: ""
+          # -- Disable sending content sha256 when copying objects to S3.
+          disableContentSHA256: false
+          putObject:
+            # -- Disable multipart uploads when copying objects to S3
+            disableMultipart: false
+            # -- Send a Content-MD5 header when copying objects to S3.
+            sendContentMD5: true
+            # -- Always precreate parts when copying objects to S3.
+            concurrentStreamParts: true
+            # -- Number of concurrent uploads to use when copying objects to S3.
+            numThreads: 4
+            # -- Part size for concurrent uploads to S3.
+            partSize: 0
 
     maintenance:
       # Expired uploads can be cleaned up automatically by enabling the clean up job.
@@ -1904,62 +1917,6 @@ services:
       # -- Image pull policy
       pullPolicy:
 
-  # -- STORE service.
-  # @default -- see detailed service configuration options below
-  store:
-    # -- Persistence settings.
-    # @default -- see detailed persistence configuration options below
-    persistence:
-      # -- Enables persistence.
-      # Needs to be enabled on production installations.
-      # If not enabled, pod restarts will lead to data loss.
-      # Also scaling this service beyond one instance is not possible if the service instances don't share the same storage.
-      enabled: false
-      # -- Enables an initContainer to chown the volume.
-      # The initContainer is run as root.
-      # This is not needed if the driver applies the fsGroup from the securityContext.
-      # The image specified in `initContainerImage` will be used for this container.
-      chownInitContainer: false
-      # -- Storage class to use.
-      # Uses the default storage class if not set.
-      storageClassName:
-      # -- Persistent volume access modes. Needs to be `["ReadWriteMany"]` when scaling this service beyond one instance.
-      accessModes:
-        - ReadWriteMany
-      # -- Size of the persistent volume.
-      size: 5Gi
-      # -- Persistent volume annotations.
-      annotations: {}
-      # -- Persistent volume finalizers.
-      finalizers:
-        - kubernetes.io/pvc-protection
-      # -- Persistent volume selector labels.
-      selectorLabels: {}
-      # -- Use a custom name for the PVC instead of the default one.
-      claimName: ""
-      # -- Use an existing PersistentVolumeClaim for persistence.
-      existingClaim:
-    # -- Per-service resources configuration. Overrides the default setting from `resources` if set.
-    resources: {}
-    # -- Per-service nodeSelector configuration. Overrides the default setting from `nodeSelector` if set.
-    nodeSelector: {}
-    # -- Per-service priorityClassName configuration. Overrides the default setting from `priorityClassName` if set.
-    priorityClassName: ""
-    # -- Affinity settings for the store service. See the documentation of this setting in approvider for examples.
-    affinity: {}
-    # -- Per-service custom labels
-    extraLabels: {}
-    # Per-service image configuration. Overrides the default setting from `image` if set.
-    image:
-      # -- Image repository
-      repository: ""
-      # -- Image tag.
-      tag: ""
-      # -- Image sha / digest (optional).
-      sha: ""
-      # -- Image pull policy
-      pullPolicy:
-
   # -- THUMBNAILS service.
   # @default -- see detailed service configuration options below
   thumbnails:
diff --git a/charts/ocis/templates/NOTES.txt b/charts/ocis/templates/NOTES.txt
index 6df7f2b2a..cc349f2a5 100644
--- a/charts/ocis/templates/NOTES.txt
+++ b/charts/ocis/templates/NOTES.txt
@@ -71,9 +71,8 @@ kubectl -n {{ .Release.Namespace }} get secrets/admin-user --template='{{"{{"}}.
 {{- $storagesystemUnpersisted := not .Values.services.storagesystem.persistence.enabled -}}
 {{- $webUnpersisted := not .Values.services.web.persistence.enabled -}}
 {{- $storageusersUnpersisted := not .Values.services.storageusers.persistence.enabled -}}
-{{- $storeUnpersisted := not .Values.services.store.persistence.enabled -}}
 
-{{ if or $storagesystemUnpersisted $webUnpersisted $storageusersUnpersisted $storeUnpersisted $idmUnpersisted $searchUnpersisted $natsUnpersisted }}
+{{ if or $storagesystemUnpersisted $webUnpersisted $storageusersUnpersisted $idmUnpersisted $searchUnpersisted $natsUnpersisted }}
 #################################################################################
 ######   WARNING: Persistence is disabled for some services.                #####
 ######   You will lose your data when a service's pod is terminated.        #####
@@ -91,9 +90,6 @@ kubectl -n {{ .Release.Namespace }} get secrets/admin-user --template='{{"{{"}}.
 {{- if $idmUnpersisted }}
 ######     - idm                                                            #####
 {{- end }}
-{{- if $storeUnpersisted }}
-######     - store                                                          #####
-{{- end }}
 {{- if $searchUnpersisted }}
 ######     - search                                                         #####
 {{- end }}
diff --git a/charts/ocis/templates/ocs/deployment.yaml b/charts/ocis/templates/ocs/deployment.yaml
index 497d7c092..c81870b79 100644
--- a/charts/ocis/templates/ocs/deployment.yaml
+++ b/charts/ocis/templates/ocs/deployment.yaml
@@ -25,6 +25,7 @@ spec:
           env:
             {{- include "ocis.serviceRegistry" . | nindent 12 }}
             {{- include "ocis.cors" . |nindent 12 }}
+            {{- include "ocis.cacheStore" . | nindent 12 }}
 
             - name: OCS_LOG_COLOR
               value: {{ .Values.logging.color | quote }}
diff --git a/charts/ocis/templates/storageusers/deployment.yaml b/charts/ocis/templates/storageusers/deployment.yaml
index 37ecdeb99..41fa4b89a 100644
--- a/charts/ocis/templates/storageusers/deployment.yaml
+++ b/charts/ocis/templates/storageusers/deployment.yaml
@@ -105,6 +105,19 @@ spec:
                   key: secretKey
             - name: STORAGE_USERS_S3NG_BUCKET
               value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.bucket | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_DISABLE_CONTENT_SHA256
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.disableContentSHA256 | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_DISABLE_MULTIPART
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.putObject.disableMultipart | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_SEND_CONTENT_MD5
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.putObject.sendContentMD5 | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_CONCURRENT_STREAM_PARTS
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.putObject.concurrentStreamParts | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_NUM_THREADS
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.putObject.numThreads | quote }}
+            - name: STORAGE_USERS_S3NG_PUT_OBJECT_PART_SIZE
+              value: {{ .Values.services.storageusers.storageBackend.driverConfig.s3ng.putObject.partSize | quote }}
+
             {{- end }}
 
             # Duration in seconds after which uploads will expire.
diff --git a/charts/ocis/templates/store/deployment.yaml b/charts/ocis/templates/store/deployment.yaml
deleted file mode 100644
index dad4c37f4..000000000
--- a/charts/ocis/templates/store/deployment.yaml
+++ /dev/null
@@ -1,79 +0,0 @@
-{{- include "ocis.basicServiceTemplates" (dict "scope" . "appName" "appNameStore" "appNameSuffix" "") -}}
-apiVersion: apps/v1
-kind: Deployment
-{{ include "ocis.metadata" . }}
-spec:
-  {{- include "ocis.selector" . | nindent 2 }}
-  replicas: 1 #TODO: https://github.com/owncloud/ocis-charts/issues/113
-  strategy:
-    type: Recreate
-  template:
-    {{- include "ocis.templateMetadata" (dict "scope" $ "configCheck" false) | nindent 4 }}
-    spec:
-      {{- include "ocis.affinity" .Values.services.store | nindent 6 }}
-      {{- include "ocis.securityContextAndtopologySpreadConstraints" . | nindent 6 }}
-      {{- if and $.Values.services.store.persistence.enabled $.Values.services.store.persistence.chownInitContainer }}
-      initContainers:
-        - name: init-chown-data
-          {{- include "ocis.initContainerImage" $ | nindent 10 }}
-          securityContext:
-            runAsNonRoot: false
-            runAsUser: 0
-          {{- include "ocis.initChownDataCommand" $ | nindent 10 }}
-          volumeMounts:
-          - name: {{ include "ocis.persistence.dataVolumeName" . }}
-            mountPath: /var/lib/ocis
-      {{ end }}
-      {{- include "ocis.priorityClassName" $.priorityClassName | nindent 6 }}
-      {{- include "ocis.hostAliases" $ | nindent 6 }}
-      nodeSelector: {{ toYaml $.nodeSelector | nindent 8 }}
-      containers:
-        - name: {{ .appName }}
-          {{- include "ocis.image" $ | nindent 10 }}
-          command: ["ocis"]
-          args: ["store", "server"]
-          {{- include "ocis.containerSecurityContext" . | nindent 10 }}
-          env:
-            {{- include "ocis.serviceRegistry" . | nindent 12 }}
-
-            - name: STORE_LOG_COLOR
-              value: {{ .Values.logging.color | quote }}
-            - name: STORE_LOG_LEVEL
-              value: {{ .Values.logging.level | quote }}
-            - name: STORE_LOG_PRETTY
-              value: {{ .Values.logging.pretty | quote }}
-
-            - name: STORE_TRACING_ENABLED
-              value: "{{ .Values.tracing.enabled }}"
-            - name: STORE_TRACING_TYPE
-              value: {{ .Values.tracing.type | quote }}
-            - name: STORE_TRACING_ENDPOINT
-              value: {{ .Values.tracing.endpoint | quote }}
-            - name: STORE_TRACING_COLLECTOR
-              value: {{ .Values.tracing.collector | quote }}
-
-            - name: STORE_DEBUG_PPROF
-              value: {{ .Values.debug.profiling | quote }}
-
-            - name: STORE_GRPC_ADDR
-              value: 0.0.0.0:9460
-            - name: STORE_DEBUG_ADDR
-              value: 0.0.0.0:9464
-
-          {{- include "ocis.livenessProbe" . | nindent 10 }}
-
-          resources: {{ toYaml .resources | nindent 12 }}
-
-          ports:
-            - name: grpc
-              containerPort: 9460
-            - name: metrics-debug
-              containerPort: 9464
-
-          volumeMounts:
-            - name: {{ include "ocis.persistence.dataVolumeName" . }}
-              mountPath: /var/lib/ocis
-
-      {{- include "ocis.imagePullSecrets" $ | nindent 6 }}
-      volumes:
-        {{- include "ocis.persistence.dataVolume" . | nindent 8 }}
diff --git a/charts/ocis/templates/store/pvc.yaml b/charts/ocis/templates/store/pvc.yaml
deleted file mode 100644
index 70fcde18b..000000000
--- a/charts/ocis/templates/store/pvc.yaml
+++ /dev/null
@@ -1,34 +0,0 @@
-{{- if and .Values.services.store.persistence.enabled (not .Values.services.store.persistence.existingClaim)}}
-{{- include "ocis.basicServiceTemplates" (dict "scope" . "appName" "appNameStore" "appNameSuffix" "") -}}
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ include "ocis.persistence.dataVolumeName" . }}
-  namespace: {{ template "ocis.namespace" . }}
-  labels:
-    {{- include "ocis.labels" . | nindent 4 }}
-  {{- with .Values.services.store.persistence.annotations  }}
-  annotations:
-{{ toYaml . | indent 4 }}
-  {{- end }}
-  {{- with .Values.services.store.persistence.finalizers  }}
-  finalizers:
-{{ toYaml . | indent 4 }}
-  {{- end }}
-spec:
-  accessModes:
-    {{- range .Values.services.store.persistence.accessModes }}
-    - {{ . | quote }}
-    {{- end }}
-  resources:
-    requests:
-      storage: {{ .Values.services.store.persistence.size | quote }}
-  {{- if .Values.services.store.persistence.storageClassName }}
-  storageClassName: {{ .Values.services.store.persistence.storageClassName }}
-  {{- end -}}
-  {{- with .Values.services.store.persistence.selectorLabels }}
-  selector:
-    matchLabels:
-{{ toYaml . | indent 6 }}
-  {{- end }}
-{{- end -}}
diff --git a/charts/ocis/templates/store/service.yaml b/charts/ocis/templates/store/service.yaml
deleted file mode 100644
index 02b92f8bb..000000000
--- a/charts/ocis/templates/store/service.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-{{- include "ocis.basicServiceTemplates" (dict "scope" . "appName" "appNameStore" "appNameSuffix" "") -}}
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ .appName }}
-  namespace: {{ template "ocis.namespace" . }}
-  labels:
-    app: {{ .appName }}
-    ocis-metrics: enabled
-    {{- include "ocis.labels" . | nindent 4 }}
-spec:
-  selector:
-    app: {{ .appName }}
-  ports:
-    - name: grpc
-      port: 9460
-      protocol: TCP
-    - name: metrics-debug
-      port: 9464
-      protocol: TCP
diff --git a/charts/ocis/values.yaml b/charts/ocis/values.yaml
index 69d597cdf..fbf0d7d3a 100644
--- a/charts/ocis/values.yaml
+++ b/charts/ocis/values.yaml
@@ -1803,6 +1803,19 @@ services:
           # -- S3 secret key to use for the S3NG driver. Only used if driver is set to "s3ng".
           # DEPRECATION WARNING: These values will be removed in the future. Predefine `secretRefs.s3CredentialsSecretRef` instead.
           secretKey: ""
+          # -- Disable sending content sha256 when copying objects to S3.
+          disableContentSHA256: false
+          putObject:
+            # -- Disable multipart uploads when copying objects to S3
+            disableMultipart: false
+            # -- Send a Content-MD5 header when copying objects to S3.
+            sendContentMD5: true
+            # -- Always precreate parts when copying objects to S3.
+            concurrentStreamParts: true
+            # -- Number of concurrent uploads to use when copying objects to S3.
+            numThreads: 4
+            # -- Part size for concurrent uploads to S3.
+            partSize: 0
 
     maintenance:
       # Expired uploads can be cleaned up automatically by enabling the clean up job.
@@ -1903,62 +1916,6 @@ services:
       # -- Image pull policy
       pullPolicy:
 
-  # -- STORE service.
-  # @default -- see detailed service configuration options below
-  store:
-    # -- Persistence settings.
-    # @default -- see detailed persistence configuration options below
-    persistence:
-      # -- Enables persistence.
-      # Needs to be enabled on production installations.
-      # If not enabled, pod restarts will lead to data loss.
-      # Also scaling this service beyond one instance is not possible if the service instances don't share the same storage.
-      enabled: false
-      # -- Enables an initContainer to chown the volume.
-      # The initContainer is run as root.
-      # This is not needed if the driver applies the fsGroup from the securityContext.
-      # The image specified in `initContainerImage` will be used for this container.
-      chownInitContainer: false
-      # -- Storage class to use.
-      # Uses the default storage class if not set.
-      storageClassName:
-      # -- Persistent volume access modes. Needs to be `["ReadWriteMany"]` when scaling this service beyond one instance.
-      accessModes:
-        - ReadWriteMany
-      # -- Size of the persistent volume.
-      size: 5Gi
-      # -- Persistent volume annotations.
-      annotations: {}
-      # -- Persistent volume finalizers.
-      finalizers:
-        - kubernetes.io/pvc-protection
-      # -- Persistent volume selector labels.
-      selectorLabels: {}
-      # -- Use a custom name for the PVC instead of the default one.
-      claimName: ""
-      # -- Use an existing PersistentVolumeClaim for persistence.
-      existingClaim:
-    # -- Per-service resources configuration. Overrides the default setting from `resources` if set.
-    resources: {}
-    # -- Per-service nodeSelector configuration. Overrides the default setting from `nodeSelector` if set.
-    nodeSelector: {}
-    # -- Per-service priorityClassName configuration. Overrides the default setting from `priorityClassName` if set.
-    priorityClassName: ""
-    # -- Affinity settings for the store service. See the documentation of this setting in approvider for examples.
-    affinity: {}
-    # -- Per-service custom labels
-    extraLabels: {}
-    # Per-service image configuration. Overrides the default setting from `image` if set.
-    image:
-      # -- Image repository
-      repository: ""
-      # -- Image tag.
-      tag: ""
-      # -- Image sha / digest (optional).
-      sha: ""
-      # -- Image pull policy
-      pullPolicy:
-
   # -- THUMBNAILS service.
   # @default -- see detailed service configuration options below
   thumbnails:
diff --git a/deployments/development-install/helmfile.yaml b/deployments/development-install/helmfile.yaml
index a6353e77d..4beaff587 100644
--- a/deployments/development-install/helmfile.yaml
+++ b/deployments/development-install/helmfile.yaml
@@ -46,10 +46,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/external-user-management/helmfile.yaml b/deployments/external-user-management/helmfile.yaml
index cc3990612..340277599 100644
--- a/deployments/external-user-management/helmfile.yaml
+++ b/deployments/external-user-management/helmfile.yaml
@@ -385,10 +385,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/ocis-mail/helmfile.yaml b/deployments/ocis-mail/helmfile.yaml
index e551f2660..116df6312 100644
--- a/deployments/ocis-mail/helmfile.yaml
+++ b/deployments/ocis-mail/helmfile.yaml
@@ -66,10 +66,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/ocis-nats/helmfile.yaml b/deployments/ocis-nats/helmfile.yaml
index ec1f0e877..e720c0442 100644
--- a/deployments/ocis-nats/helmfile.yaml
+++ b/deployments/ocis-nats/helmfile.yaml
@@ -131,10 +131,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/ocis-nats/streams/ocis.yaml b/deployments/ocis-nats/streams/ocis.yaml
index 34d528a62..e0dee5b73 100644
--- a/deployments/ocis-nats/streams/ocis.yaml
+++ b/deployments/ocis-nats/streams/ocis.yaml
@@ -294,3 +294,87 @@ spec:
   storage: memory
   subjects:
     - $KV.storage-system.>
+---
+apiVersion: jetstream.nats.io/v1beta2
+kind: Stream
+metadata:
+  name: kv-cache-roles
+spec:
+  account: ocis-nats
+  allowRollup: true
+  description: oCIS graph roles cache
+  denyDelete: true
+  discard: new
+  duplicateWindow: "2m0s"
+  maxAge: "24h"
+  maxBytes: -1
+  maxConsumers: -1
+  maxMsgs: -1
+  maxMsgSize: -1
+  maxMsgsPerSubject: 1
+  name: KV_cache-roles
+  noAck: false
+  allowDirect: false
+  preventDelete: false
+  preventUpdate: false
+  replicas: 3
+  retention: limits
+  storage: memory
+  subjects:
+    - $KV.cache-roles.>
+---
+apiVersion: jetstream.nats.io/v1beta2
+kind: Stream
+metadata:
+  name: kv-proxy
+spec:
+  account: ocis-nats
+  allowRollup: true
+  description: oCIS ocs and proxy signing keys
+  denyDelete: true
+  discard: new
+  duplicateWindow: "2m0s"
+  maxAge: "24h"
+  maxBytes: -1
+  maxConsumers: -1
+  maxMsgs: -1
+  maxMsgSize: -1
+  maxMsgsPerSubject: 1
+  name: KV_proxy
+  noAck: false
+  allowDirect: false
+  preventDelete: false
+  preventUpdate: false
+  replicas: 3
+  retention: limits
+  storage: memory
+  subjects:
+    - $KV.proxy.>
+---
+apiVersion: jetstream.nats.io/v1beta2
+kind: Stream
+metadata:
+  name: kv-ocis-pkg
+spec:
+  account: ocis-nats
+  allowRollup: true
+  description: oCIS settings roles cache
+  denyDelete: true
+  discard: new
+  duplicateWindow: "2m0s"
+  maxAge: "24h"
+  maxBytes: -1
+  maxConsumers: -1
+  maxMsgs: -1
+  maxMsgSize: -1
+  maxMsgsPerSubject: 1
+  name: KV_ocis-pkg
+  noAck: false
+  allowDirect: false
+  preventDelete: false
+  preventUpdate: false
+  replicas: 3
+  retention: limits
+  storage: memory
+  subjects:
+    - $KV.ocis-pkg.>
diff --git a/deployments/ocis-office/helmfile.yaml b/deployments/ocis-office/helmfile.yaml
index 4749776c8..0c99c3e92 100644
--- a/deployments/ocis-office/helmfile.yaml
+++ b/deployments/ocis-office/helmfile.yaml
@@ -225,10 +225,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/ocis-redis/helmfile.yaml b/deployments/ocis-redis/helmfile.yaml
index 6bc01dd49..8734c4699 100644
--- a/deployments/ocis-redis/helmfile.yaml
+++ b/deployments/ocis-redis/helmfile.yaml
@@ -68,10 +68,6 @@ releases:
             persistence:
               enabled: true
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/ocis-rook-ceph/helmfile.yaml b/deployments/ocis-rook-ceph/helmfile.yaml
index bef57f5b1..5e0ab7b1c 100644
--- a/deployments/ocis-rook-ceph/helmfile.yaml
+++ b/deployments/ocis-rook-ceph/helmfile.yaml
@@ -57,10 +57,6 @@ releases:
               enabled: true
               storageClassName: rook-cephfs
 
-          store:
-            persistence:
-              enabled: true
-
           thumbnails:
             persistence:
               enabled: true
diff --git a/deployments/priority-classes/helmfile.yaml b/deployments/priority-classes/helmfile.yaml
index 71cb8cb73..c8c01a107 100644
--- a/deployments/priority-classes/helmfile.yaml
+++ b/deployments/priority-classes/helmfile.yaml
@@ -57,11 +57,6 @@ releases:
             priorityClassName: ocis-high-priority
             jobPriorityClassName: ocis-low-priority
 
-          store:
-            persistence:
-              enabled: true
-            priorityClassName: ocis-medium-priority
-
           thumbnails:
             persistence:
               enabled: true
@@ -72,4 +67,3 @@ releases:
             persistence:
               enabled: true
             priorityClassName: ocis-high-priority
-