diff --git a/ansible/roles/web/files/logrotate.conf b/ansible/roles/web/files/logrotate.conf
index d7e7dbe6d..b363fb0fd 100644
--- a/ansible/roles/web/files/logrotate.conf
+++ b/ansible/roles/web/files/logrotate.conf
@@ -7,7 +7,6 @@
        compress
        notifempty
        missingok
-       su nb nb
 }
 
 /var/log/nginx/*.log {
diff --git a/ansible/roles/web/tasks/main.yml b/ansible/roles/web/tasks/main.yml
index b643c68a5..cfd549139 100644
--- a/ansible/roles/web/tasks/main.yml
+++ b/ansible/roles/web/tasks/main.yml
@@ -85,6 +85,8 @@
 - name: Setup logrotate
   become: yes
   copy: src=logrotate.conf dest=/etc/logrotate.d/newsblur mode=0755
+  tags:
+    - logrotate
 
 - name: Reload gunicorn
   debug: