diff --git a/.env.sample b/.env.sample
index ee7b975..6bcc814 100644
--- a/.env.sample
+++ b/.env.sample
@@ -226,7 +226,5 @@ WRITE_TIMEOUT=0s
 ## Enable onion service support
 #ONION_ENABLED=1
 
-## Keep access logs on a volume.
-# You'll need to setup rotation yourself and send the USR1 signal to
-# Traefik for reloading.
+## Access logs
 #COMPOSE_FILE="$COMPOSE_FILE:compose.access-log.yml"
diff --git a/README.md b/README.md
index b845d48..0779397 100644
--- a/README.md
+++ b/README.md
@@ -77,3 +77,19 @@ protection your apps.**
 Uncomment the line in the config setting `ONION_ENABLED=1`. This will create a new entrypoint on port 9052 which can be used to bypass forced SSL. For more details, see the [onion recipe](https://recipes.coopcloud.tech/onion).
 
 [`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
+
+## Access logs
+
+To keep access logs on a volume, uncomment the "Access logs" section.
+
+You'll need to setup rotation yourself and send the USR1 signal to
+Traefik for reloading.  For instance, with `logrotate:
+
+```
+# /etc/logrotate.d/traefik.conf
+/var/lib/docker/volumes/traefik_SERVICE_NAME_access-logs/_data/access_log.jsonl {
+  postrotate
+    pkill -USR1 traefik
+  endscript
+}
+```