Hi,

I've noticed that when the access and error logs are gzipped, that the file permissions of these files are world readable. Yet the access and error logs are not.

I think this should be changed (aside from the fact I could chmod 640 the entire /var/log/nginx folder). Where can this be fixed?

Thanks!
Jeroen

nginx does not gzip any log files, you should look into the logrotate configs (usually /etc/logrotate.d/nginx). Logrotate is the only responsible thing for permissions of any rotated files.