# /var/log/nagios is 770 root:nagcmd and logrotate refuses a group-writable
# directory without su; the global "create 640 root logs" would hand the fresh
# log to root and leave the nagios user unable to write it
/var/log/nagios/nagios-pushover.log {
	su root nagcmd
	# the script creates the log on the first notification it handles, and until
	# then logrotate would report a missing file on every run
	missingok
	create 640 nagios nagios
}
