nginx logrotate fixup

* Set postrotate script to SIGHUP nginx after rotation
* Explicitly set permissions on freshly created logfiles