* Set postrotate script to SIGHUP nginx after rotation * Explicitly set permissions on freshly created logfiles
