diff --git a/.nginx.metadata b/.nginx.metadata
new file mode 100644
index 0000000..b226b57
--- /dev/null
+++ b/.nginx.metadata
@@ -0,0 +1,2 @@
+6b4ab4eff3c617e133819f43fdfc14708e593a79 nginx-1.20.1.tar.gz
+e2858105f16d5a4b2e68066ed9b77c3d200a435f nginx-1.20.1.tar.gz.asc
diff --git a/nginx.logrotate b/nginx.logrotate
index 2fef5aa..174c4ee 100644
--- a/nginx.logrotate
+++ b/nginx.logrotate
@@ -1,4 +1,5 @@
-/var/log/nginx/*log {
+/var/log/nginx/*.log {
+    create 0640 nginx root
     daily
     rotate 10
     missingok
diff --git a/nginx.spec b/nginx.spec
index 19bb1d1..896d88b 100644
--- a/nginx.spec
+++ b/nginx.spec
@@ -41,7 +41,7 @@
 Name:              nginx
 Epoch:             1
 Version:           1.20.1
-Release:           13%{?dist}
+Release:           14%{?dist}
 
 Summary:           A high performance web server and reverse proxy server
 # BSD License (two clause)
@@ -549,7 +549,9 @@ fi
 %config(noreplace) %{_sysconfdir}/logrotate.d/nginx
 %attr(770,%{nginx_user},root) %dir %{_localstatedir}/lib/nginx
 %attr(770,%{nginx_user},root) %dir %{_localstatedir}/lib/nginx/tmp
-%dir %{_localstatedir}/log/nginx
+%attr(711,root,root) %dir %{_localstatedir}/log/nginx
+%ghost %attr(640,%{nginx_user},root) %{_localstatedir}/log/nginx/access.log
+%ghost %attr(640,%{nginx_user},root) %{_localstatedir}/log/nginx/error.log
 %dir %{nginx_moduledir}
 %dir %{nginx_moduleconfdir}
 
@@ -600,6 +602,9 @@ fi
 
 
 %changelog
+* Thu Nov 24 2022 Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-14
+- Resolves: #2086527 - Fix logrotate config and nginx log dir permissions
+
 * Wed Jun 22 2022 Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-13
 - Resolves: #2099752 - nginx minimisation for ubi-micro