diff --git a/site-modules/profile/manifests/swh/deploy/webapp.pp b/site-modules/profile/manifests/swh/deploy/webapp.pp
--- a/site-modules/profile/manifests/swh/deploy/webapp.pp
+++ b/site-modules/profile/manifests/swh/deploy/webapp.pp
@@ -75,13 +75,28 @@
     mode   => '0770',
   }
 
-  file {"${conf_log_dir}/swh-web.log":
+  $logfile = "${conf_log_dir}/swh-web.log"
+  file {$logfile:
     ensure => present,
     owner  => $user,
     group  => $group,
     mode   => '0770',
   }
 
+  $swh_logrotate_conf = '/etc/logrotate.d/swh-webapp'
+  # Template uses:
+  # $logfile
+  # $user
+  # $group
+  file {$swh_logrotate_conf:
+    ensure  => file,
+    owner   => $user,
+    group   => $group,
+    mode    => '0644',
+    content => template('profile/swh/logrotate-webapp.conf.erb'),
+    require => File[$logfile],
+  }
+
   file {$vhost_docroot:
     ensure => directory,
     owner  => 'root',
diff --git a/site-modules/profile/templates/swh/logrotate-webapp.conf.erb b/site-modules/profile/templates/swh/logrotate-webapp.conf.erb
new file mode 100644
--- /dev/null
+++ b/site-modules/profile/templates/swh/logrotate-webapp.conf.erb
@@ -0,0 +1,12 @@
+# Software Heritage logrotate configuration
+# Managed by puppet. Changes will be overwritten.
+
+<%= @logfile %> {
+    weekly
+    missingok
+    rotate 5
+    copytruncate
+    compress
+    notifempty
+    su <%= @user %> <%= @group %>
+}