added logrotate option; changed nginx user