logrotate recreates the file but resets the ACL and the application loses write access after midnight

The service is healthy all day, yet every night it fails because the replacement log file does not preserve the same access model as the original.