diff --git a/.dockerignore b/.dockerignore
index 09324fa9..93e7db9e 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -3,3 +3,5 @@
 .git
 **/node_modules
 local
+# Runtime log tree (bind-mounted at run time; the server image mkdir's its own).
+log
diff --git a/.gitignore b/.gitignore
index 4e8d29c5..edd2ad8f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,8 +13,13 @@ var/www/public/captcha
 data/
 data.*.bak/
 tmp/
-log/
 captcha/
+
+# Log tree: keep the directory skeleton (log/*/.gitkeep) but ignore the output.
+log/**/*.log
+log/**/*.gz
+log/**/*.[0-9]
+log/**/*.log.*
 /memcached/
 node_modules/
 .env
diff --git a/bin/deploy.pl b/bin/deploy.pl
index e1b29f3d..20719a7b 100755
--- a/bin/deploy.pl
+++ b/bin/deploy.pl
@@ -31,7 +31,9 @@ use Git::Wrapper;
 use AnyEvent::Util;
 use DateTime;
 $ENV{PATH} = '/data/apps/bin:' . $ENV{PATH};
-open STDOUT, '>>', '/tmp/lacuna-deploy.log';
+my $log_dir = $ENV{LACUNA_LOG_DIR} || '/home/lacuna/server/log';
+open(STDOUT, '>>', "$log_dir/deploy/deploy.log")
+    or open(STDOUT, '>>', '/tmp/lacuna-deploy.log');
 open STDERR, '>&', \*STDOUT;
 
 sub out {
diff --git a/bin/deploy.psgi b/bin/deploy.psgi
index bd5a3b40..db91b5ba 120000
--- a/bin/deploy.psgi
+++ b/bin/deploy.psgi
@@ -28,7 +28,7 @@ sub dispatch {
     return "ignored: missing repo/branch\n" unless $repo && $branch;
 
     # Fire and forget - deploy.pl daemonises itself and logs to
-    # /tmp/lacuna-deploy.log.
+    # $LACUNA_LOG_DIR/deploy/deploy.log (falling back to /tmp/lacuna-deploy.log).
     system('perl', $deploy_script, $repo, $branch);
     return "deploying $repo / $branch\n";
 }
diff --git a/bin/init_sched.sh b/bin/init_sched.sh
index bec62c7e..d251a2b2 100644
--- a/bin/init_sched.sh
+++ b/bin/init_sched.sh
@@ -1,2 +1,8 @@
+#!/bin/bash
+# Legacy bare-metal launcher for the scheduler daemons (--daemonize). Under
+# compose these run via bin/run_scheduler.sh instead. App::Daemon writes to
+# $App::Daemon::logfile (set in each schedule_*.pl) but won't create the dir.
+mkdir -p "${LACUNA_LOG_DIR:-/home/lacuna/server/log}/scheduler"
+
 /data/apps/bin/perl /home/lacuna/server/bin/schedule_building.pl --noquiet --daemonize --initialize
 /data/apps/bin/perl /home/lacuna/server/bin/schedule_ship_arrival.pl --noquiet --daemonize --initialize
diff --git a/bin/lacuna.logrotate b/bin/lacuna.logrotate
index fcd66551..0e47136d 120000
--- a/bin/lacuna.logrotate
+++ b/bin/lacuna.logrotate
@@ -1,45 +1,28 @@
 # logrotate configuration for The Lacuna Expanse server.
 #
-# Reconstructed: this file only ever existed in this repo as a symlink into the
-# (now gone) Lacuna-Server-Private repo. It is consumed by the OS logrotate cron,
-# not by any repo code. Install it as /etc/logrotate.d/lacuna (or point logrotate
-# at it directly).
+# Consumed by the logrotate sidecar defined in docker/docker-compose.homelab.yml,
+# which bind-mounts host ./log at /home/lacuna/server/log and this file at
+# /etc/logrotate.d/lacuna. (It can equally be installed as /etc/logrotate.d/lacuna
+# on a bare-metal host.) The paths below are the in-container log tree, which is
+# also the host ./log tree via the bind mount.
 #
-# The server's cron drivers (bin/run_*.sh), the schedule daemons
-# (bin/schedule_{building,ship_arrival,captcha}.pl) and the deploy webhook all
-# append to flat files under /tmp; the plack/starman processes write to
-# /home/lacuna/server/log. Everything is rotated with copytruncate because those
-# long-running processes keep the log file handles open and have no reopen signal.
+# Every producer now writes into this tree:
+#   server/    - the plack app (Log4perl FILE appender) + plackup framework noise
+#   scheduler/ - schedule_{building,ship_arrival,captcha}.pl (via bin/run_scheduler.sh)
+#   cron/      - the ofelia-driven bin/run_*.sh batch scripts
+#   deploy/    - bin/deploy.pl
+#   nginx/     - nginx access.log + error.log
+#
+# copytruncate: plackup, the scheduler daemons and nginx hold their log handles
+# open and have no cross-container reopen signal; truncating in place on the
+# shared bind mount needs none.
 
-/tmp/hourly.log
-/tmp/run_two_hourly.log
-/tmp/four_hourly.log
-/tmp/daily.log
-/tmp/weekly.log
-/tmp/weekly_medals.log
-/tmp/news_feeds.log
-/tmp/tick_planets.log
-/tmp/tick_spies.log
-/tmp/tick_fissures.log
-/tmp/test_weather.log
-/tmp/schedule_building.log
-/tmp/schedule_ship_arrival.log
-/tmp/schedule_captcha.log
-/tmp/attack_saben.log
-/tmp/attack_diab.log
-/tmp/attack_trel.log
-/tmp/lacuna-deploy.log
+/home/lacuna/server/log/server/*.log
+/home/lacuna/server/log/scheduler/*.log
+/home/lacuna/server/log/cron/*.log
+/home/lacuna/server/log/deploy/*.log
+/home/lacuna/server/log/nginx/*.log
 {
-    daily
-    rotate 7
-    missingok
-    notifempty
-    compress
-    delaycompress
-    copytruncate
-}
-
-/home/lacuna/server/log/*.log {
     daily
     rotate 14
     missingok
diff --git a/bin/run_daily.sh b/bin/run_daily.sh
index b4135504..57eed565 100755
--- a/bin/run_daily.sh
+++ b/bin/run_daily.sh
@@ -1,10 +1,14 @@
 #!/bin/bash
 export PATH=/data/apps/bin:$PATH
-touch /tmp/daily.log
 cd /home/lacuna/server/bin
 
-# redirect everything.
-exec >> /tmp/daily.log
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/cron"
+mkdir -p "$LOG_DIR"
+
+# Single target for the whole run -> redirect once with `exec` (the multi-target
+# run_*.sh scripts redirect per-line instead).
+touch "$LOG_DIR/daily.log"
+exec >> "$LOG_DIR/daily.log"
 exec 2>&1
 
 perl trickle_essentia_veins.pl
diff --git a/bin/run_four_hourly.sh b/bin/run_four_hourly.sh
index ec2ff5b7..7a4b9d7f 100755
--- a/bin/run_four_hourly.sh
+++ b/bin/run_four_hourly.sh
@@ -1,5 +1,8 @@
 #!/bin/bash
 export PATH=/data/apps/bin:$PATH
 cd /home/lacuna/server/bin
-perl summarize_spies.pl >>/tmp/four_hourly.log 2>>/tmp/four_hourly.log
 
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/cron"
+mkdir -p "$LOG_DIR"
+
+perl summarize_spies.pl >>"$LOG_DIR/four_hourly.log" 2>>"$LOG_DIR/four_hourly.log"
diff --git a/bin/run_hourly.sh b/bin/run_hourly.sh
index 170328bf..13374cc9 100755
--- a/bin/run_hourly.sh
+++ b/bin/run_hourly.sh
@@ -1,20 +1,26 @@
 #!/bin/bash
 export PATH=/data/apps/bin:$PATH
 cd /home/lacuna/server/bin
-perl clean_up_empires.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl sanitize_ss.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl summarize_economy.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl generate_news_feeds.pl >>/tmp/news_feeds.log 2>>/tmp/news_feeds.log
-perl tick_parliament.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl add_missions.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl clean_up_market.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl jackpot/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl trelvestian/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl diablotin/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl saben/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl delambert/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl cult/hourly_update.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
-perl tick_fissures.pl >>/tmp/tick_fissures.log 2>>/tmp/tick_fissures.log
-#perl test_weather.pl >>/tmp/test_weather.csv 2>/tmp/test_weather.log
-perl trelvestian/send_attack.pl >>/tmp/attack_trel.log 2>>/tmp/attack_trel.log &
-perl tick_stations.pl >>/tmp/hourly.log 2>>/tmp/hourly.log
+
+# Batch output goes to the shared log tree (host log/cron/). Several targets here,
+# so redirect per-line; single-target scripts (run_daily.sh) use `exec` instead.
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/cron"
+mkdir -p "$LOG_DIR"
+
+perl clean_up_empires.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl sanitize_ss.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl summarize_economy.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl generate_news_feeds.pl >>"$LOG_DIR/news_feeds.log" 2>>"$LOG_DIR/news_feeds.log"
+perl tick_parliament.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl add_missions.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl clean_up_market.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl jackpot/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl trelvestian/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl diablotin/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl saben/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl delambert/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl cult/hourly_update.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
+perl tick_fissures.pl >>"$LOG_DIR/tick_fissures.log" 2>>"$LOG_DIR/tick_fissures.log"
+#perl test_weather.pl >>"$LOG_DIR/test_weather.csv" 2>"$LOG_DIR/test_weather.log"
+perl trelvestian/send_attack.pl >>"$LOG_DIR/attack_trel.log" 2>>"$LOG_DIR/attack_trel.log" &
+perl tick_stations.pl >>"$LOG_DIR/hourly.log" 2>>"$LOG_DIR/hourly.log"
diff --git a/bin/run_scheduler.sh b/bin/run_scheduler.sh
new file mode 100644
index 00000000..34657231
--- /dev/null
+++ b/bin/run_scheduler.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+#
+# Wrapper for the long-running beanstalk scheduler daemons
+# (schedule_building.pl / schedule_ship_arrival.pl / schedule_captcha.pl).
+#
+# Under compose these run --nodaemonize, so App::Daemon never redirects and their
+# output would live only in `docker logs`. This tees combined stdout+stderr to
+# the shared log tree (log/scheduler/<script>.log on the host) while keeping it
+# in `docker logs` too. `exec` leaves perl as PID 1 so `docker stop` -> SIGTERM
+# reaches it directly.
+#
+set -euo pipefail
+
+cd /home/lacuna/server/bin
+
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/scheduler"
+mkdir -p "$LOG_DIR"
+
+script="$1"; shift
+exec perl "$script" "$@" > >(tee -a "$LOG_DIR/${script%.pl}.log") 2>&1
diff --git a/bin/run_two_hourly.sh b/bin/run_two_hourly.sh
index 86cc938d..9daf9c12 100755
--- a/bin/run_two_hourly.sh
+++ b/bin/run_two_hourly.sh
@@ -1,8 +1,12 @@
 #!/bin/bash
 export PATH=/data/apps/bin:$PATH
 cd /home/lacuna/server/bin
-perl tick_planets.pl >>/tmp/tick_planets.log 2>>/tmp/tick_planets.log &
-perl tick_spies.pl >>/tmp/tick_spies.log 2>>/tmp/tick_spies.log &
-perl summarize_server.pl >>/tmp/run_two_hourly.log 2>>/tmp/run_two_hourly.log
-perl saben/send_attack.pl >>/tmp/attack_saben.log 2>>/tmp/attack_saben.log &
-perl diablotin/send_attack.pl >>/tmp/attack_diab.log 2>>/tmp/attack_diab.log &
+
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/cron"
+mkdir -p "$LOG_DIR"
+
+perl tick_planets.pl >>"$LOG_DIR/tick_planets.log" 2>>"$LOG_DIR/tick_planets.log" &
+perl tick_spies.pl >>"$LOG_DIR/tick_spies.log" 2>>"$LOG_DIR/tick_spies.log" &
+perl summarize_server.pl >>"$LOG_DIR/summarize_server.log" 2>>"$LOG_DIR/summarize_server.log"
+perl saben/send_attack.pl >>"$LOG_DIR/attack_saben.log" 2>>"$LOG_DIR/attack_saben.log" &
+perl diablotin/send_attack.pl >>"$LOG_DIR/attack_diab.log" 2>>"$LOG_DIR/attack_diab.log" &
diff --git a/bin/run_weekly.sh b/bin/run_weekly.sh
index 61878f9d..e82992fb 100755
--- a/bin/run_weekly.sh
+++ b/bin/run_weekly.sh
@@ -1,6 +1,10 @@
 #!/bin/bash
 export PATH=/data/apps/bin:$PATH
 cd /home/lacuna/server/bin
-perl weekly_medals.pl >> /tmp/weekly_medals.log 2>> /tmp/weekly_medals.log
-perl trelvestian/reset_essentia_veins.pl >> /tmp/weekly.log 2>> /tmp/weekly.log
-perl clean_up_battle_log.pl >> /tmp/weekly.log 2>> /tmp/weekly.log
+
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/cron"
+mkdir -p "$LOG_DIR"
+
+perl weekly_medals.pl >> "$LOG_DIR/weekly_medals.log" 2>> "$LOG_DIR/weekly_medals.log"
+perl trelvestian/reset_essentia_veins.pl >> "$LOG_DIR/weekly.log" 2>> "$LOG_DIR/weekly.log"
+perl clean_up_battle_log.pl >> "$LOG_DIR/weekly.log" 2>> "$LOG_DIR/weekly.log"
diff --git a/bin/schedule_building.pl b/bin/schedule_building.pl
index 7254413b..2a414ba0 100644
--- a/bin/schedule_building.pl
+++ b/bin/schedule_building.pl
@@ -26,7 +26,7 @@ GetOptions(
 );
 
 $App::Daemon::loglevel = $quiet ? $WARN : $DEBUG;
-$App::Daemon::logfile  = '/tmp/schedule_building.log';
+$App::Daemon::logfile  = '/home/lacuna/server/log/scheduler/schedule_building.log';
 
 chdir '/home/lacuna/server/bin';
 
@@ -177,6 +177,9 @@ exit 0;
 sub out {
     my ($message) = @_;
     my $logger = Log::Log4perl->get_logger;
+    # STDERR is what actually lands in the log: under compose bin/run_scheduler.sh
+    # tees it to log/scheduler/, and App::Daemon captures it to $logfile when
+    # daemonized. Log4perl is never ->init'd here, so $logger->info is a no-op.
     print STDERR $message."\n";
     $logger->info($message);
 }
diff --git a/bin/schedule_captcha.pl b/bin/schedule_captcha.pl
index e77f299d..eaf0a790 100644
--- a/bin/schedule_captcha.pl
+++ b/bin/schedule_captcha.pl
@@ -28,7 +28,7 @@ GetOptions(
 );
 
 $App::Daemon::loglevel = $quiet ? $WARN : $DEBUG;
-$App::Daemon::logfile  = '/tmp/schedule_captcha.log';
+$App::Daemon::logfile  = '/home/lacuna/server/log/scheduler/schedule_captcha.log';
 $App::Daemon::as_user  = 'root';
 $App::Daemon::as_group = 'root';
 
@@ -146,6 +146,9 @@ exit 0;
 sub out {
     my ($message) = @_;
     my $logger = Log::Log4perl->get_logger;
+    # STDERR is what actually lands in the log: under compose bin/run_scheduler.sh
+    # tees it to log/scheduler/, and App::Daemon captures it to $logfile when
+    # daemonized. Log4perl is never ->init'd here, so $logger->info is a no-op.
     print STDERR $message."\n";
     $logger->info($message);
 }
diff --git a/bin/schedule_ship_arrival.pl b/bin/schedule_ship_arrival.pl
index 576d976c..8d6af967 100644
--- a/bin/schedule_ship_arrival.pl
+++ b/bin/schedule_ship_arrival.pl
@@ -26,7 +26,7 @@ GetOptions(
 );
 
 $App::Daemon::loglevel = $quiet ? $WARN : $DEBUG;
-$App::Daemon::logfile  = '/tmp/schedule_ship_arrival.log';
+$App::Daemon::logfile  = '/home/lacuna/server/log/scheduler/schedule_ship_arrival.log';
 
 chdir '/home/lacuna/server/bin';
 
@@ -150,6 +150,9 @@ exit 0;
 sub out {
     my ($message) = @_;
     my $logger = Log::Log4perl->get_logger;
+    # STDERR is what actually lands in the log: under compose bin/run_scheduler.sh
+    # tees it to log/scheduler/, and App::Daemon captures it to $logfile when
+    # daemonized. Log4perl is never ->init'd here, so $logger->info is a no-op.
     print STDERR $message."\n";
     $logger->info($message);
 }
diff --git a/bin/startdev.sh b/bin/startdev.sh
index dc35a22b..36b3bdfa 100755
--- a/bin/startdev.sh
+++ b/bin/startdev.sh
@@ -1,3 +1,11 @@
+LOG_DIR="${LACUNA_LOG_DIR:-/home/lacuna/server/log}/server"
+mkdir -p "$LOG_DIR" || { echo "startdev.sh: cannot create $LOG_DIR" >&2; exit 1; }
+
 perl generate_docs.pl > /dev/null
 
-plackup --env development --server Plack::Handler::Standalone --app lacuna.psgi
+# The app's own logging goes to log/server/lacuna.log via Log4perl (see
+# etc-*/log4perl.conf). This tee only captures plackup's framework noise --
+# warnings, "Server Started", stack traces -- which never passes through
+# Log::Any. Keeping it in `docker logs` too, hence tee rather than a plain >>.
+exec plackup --env development --server Plack::Handler::Standalone --app lacuna.psgi \
+  > >(tee -a "$LOG_DIR/plackup.log") 2>&1
diff --git a/docker/docker-compose.homelab.yml b/docker/docker-compose.homelab.yml
index 6c50b698..2e68a71c 100644
--- a/docker/docker-compose.homelab.yml
+++ b/docker/docker-compose.homelab.yml
@@ -42,6 +42,7 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server
+    restart: unless-stopped
     volumes:
       - ./server/etc-homelab:/home/lacuna/server/etc
 
@@ -49,6 +50,7 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-building-scheduler
+    restart: unless-stopped
     volumes:
       - ./server/etc-homelab:/home/lacuna/server/etc
 
@@ -56,6 +58,7 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-ship-scheduler
+    restart: unless-stopped
     volumes:
       - ./server/etc-homelab:/home/lacuna/server/etc
 
@@ -63,6 +66,7 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-captcha-scheduler
+    restart: unless-stopped
     volumes:
       - ./server/etc-homelab:/home/lacuna/server/etc
 
@@ -70,6 +74,20 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-script-scheduler
+    restart: unless-stopped
+
+  # Rotates the shared ./log tree daily (copytruncate, 14 days, gzip).
+  # Prod only -- dev/test churn the stack often enough and rely on the
+  # json-file size caps plus manual cleanup.
+  logrotate:
+    build:
+      context: ./logrotate
+      dockerfile: Dockerfile
+    container_name: logrotate
+    restart: unless-stopped
+    volumes:
+      - ./../log:/home/lacuna/server/log
+      - ./../bin/lacuna.logrotate:/etc/logrotate.d/lacuna:ro
 
 networks:
   default:
diff --git a/docker/docker-compose.test.yml b/docker/docker-compose.test.yml
index 3bfe0c37..2d72f99c 100644
--- a/docker/docker-compose.test.yml
+++ b/docker/docker-compose.test.yml
@@ -51,6 +51,10 @@ services:
       # Disables the prod-only size-limit / profiling middleware (bin/lacuna.psgi).
       TLE_NO_MIDDLEWARE: 1
       LACUNA_HIGH_SPEED_TEST_MODE: 1
+      # Throwaway in-container log dir: the test stack inherits the base ./log
+      # bind mount but has no logrotate sidecar, so keep test runs off the
+      # tracked host tree. etc-test/log4perl.conf points its FILE appender here.
+      LACUNA_LOG_DIR: /tmp/lacuna-log
     volumes:
       - ./server/etc-test:/home/lacuna/server/etc
 
@@ -58,6 +62,8 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-building-scheduler
+    environment:
+      LACUNA_LOG_DIR: /tmp/lacuna-log
     volumes:
       - ./server/etc-test:/home/lacuna/server/etc
 
@@ -65,6 +71,8 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-ship-scheduler
+    environment:
+      LACUNA_LOG_DIR: /tmp/lacuna-log
     volumes:
       - ./server/etc-test:/home/lacuna/server/etc
 
@@ -72,6 +80,8 @@ services:
     extends:
       file: ./server/docker-compose.yml
       service: server-captcha-scheduler
+    environment:
+      LACUNA_LOG_DIR: /tmp/lacuna-log
     volumes:
       - ./server/etc-test:/home/lacuna/server/etc
 
diff --git a/docker/logrotate/Dockerfile b/docker/logrotate/Dockerfile
new file mode 100644
index 00000000..2935d0e6
--- /dev/null
+++ b/docker/logrotate/Dockerfile
@@ -0,0 +1,10 @@
+# Rotates the shared ./log tree in production. Runs as a sidecar in
+# docker/docker-compose.homelab.yml; see bin/lacuna.logrotate for the policy.
+FROM alpine:3.20
+
+RUN apk add --no-cache logrotate tzdata
+
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/docker/logrotate/entrypoint.sh b/docker/logrotate/entrypoint.sh
new file mode 100644
index 00000000..6ceb9495
--- /dev/null
+++ b/docker/logrotate/entrypoint.sh
@@ -0,0 +1,17 @@
+#!/bin/sh
+#
+# Run logrotate once a day against the bind-mounted config. `|| true` so a
+# transient error (e.g. a log file mid-rename) doesn't kill the container.
+#
+set -eu
+
+CONF=/etc/logrotate.d/lacuna
+STATE=/var/lib/logrotate/lacuna.status
+
+mkdir -p /var/lib/logrotate
+
+while true; do
+    echo "$(date -u '+%Y-%m-%dT%H:%M:%SZ') running logrotate"
+    logrotate -v -s "$STATE" "$CONF" || true
+    sleep 86400
+done
diff --git a/docker/nginx/docker-compose.yml b/docker/nginx/docker-compose.yml
index ca92fe70..bbeb91a1 100644
--- a/docker/nginx/docker-compose.yml
+++ b/docker/nginx/docker-compose.yml
@@ -4,6 +4,13 @@ services:
       context: ./../../
       dockerfile: ./docker/nginx/Dockerfile
     container_name: nginx
+    # Bound the json-file log (YAML anchors don't cross files, so this is spelled
+    # out here rather than sharing docker/server/docker-compose.yml's anchor).
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "5"
     depends_on:
       server:
         condition: service_started
diff --git a/docker/nginx/nginx.conf b/docker/nginx/nginx.conf
index dc01ccce..685854ac 100644
--- a/docker/nginx/nginx.conf
+++ b/docker/nginx/nginx.conf
@@ -14,6 +14,11 @@ http {
                       '$status $body_bytes_sent "$http_referer" '
                       '"$http_user_agent" "$http_x_forwarded_for"';
 
+    # `logs/` is relative to the nginx prefix (/etc/nginx) -> /etc/nginx/logs,
+    # which compose bind-mounts to host log/nginx/. Was previously unset, so the
+    # access log went to the image's /dev/stdout symlink and was lost.
+    access_log  logs/access.log  main;
+
     sendfile        on;
 
     keepalive_timeout  65;
diff --git a/docker/server/Dockerfile b/docker/server/Dockerfile
index 0d5775db..2ac4588b 100644
--- a/docker/server/Dockerfile
+++ b/docker/server/Dockerfile
@@ -64,4 +64,13 @@ ENV PATH="/home/lacuna/server/local/bin:${PATH}" \
     PERLLIB="/home/lacuna/server/lib" \
     TERM=xterm
 
+# Log tree (mirrors docker/nginx/Dockerfile's `mkdir /etc/nginx/logs`). Compose
+# bind-mounts host ./log over this at run time; creating it here means the
+# subdirs still exist when the mount is absent (bare-metal, or the test overlay
+# which redirects LACUNA_LOG_DIR elsewhere).
+RUN mkdir -p /home/lacuna/server/log/server \
+             /home/lacuna/server/log/scheduler \
+             /home/lacuna/server/log/cron \
+             /home/lacuna/server/log/deploy
+
 WORKDIR /home/lacuna/server/bin
diff --git a/docker/server/docker-compose.yml b/docker/server/docker-compose.yml
index e22d77d9..9d82880b 100644
--- a/docker/server/docker-compose.yml
+++ b/docker/server/docker-compose.yml
@@ -1,3 +1,12 @@
+# Bound every container's json-file log so `docker logs` / the host daemon's
+# disk cannot grow without limit. `extends` (used by the dev/test/homelab
+# overlays) copies the *resolved* logging map, so the anchor need only live here.
+x-logging: &default-logging
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "5"
+
 services:
   server:
     build:
@@ -9,6 +18,11 @@ services:
       - mysql
       - memcached
       - beanstalk
+    environment:
+      # Root of the host-mounted log tree (see the ./../../log mount below).
+      # Scripts fall back to this same path when the var is unset.
+      LACUNA_LOG_DIR: /home/lacuna/server/log
+    logging: *default-logging
     ports:
       - 3050:5000
     volumes:
@@ -21,17 +35,21 @@ services:
       - ./../../var/www/public/api/api.css:/home/lacuna/server/var/www/public/api/api.css
       - ./../../missions:/home/lacuna/server/missions
       - ./../../tmp:/tmp
+      - ./../../log:/home/lacuna/server/log
 
   server-building-scheduler:
     build:
       context: ./../../
       dockerfile: ./docker/server/Dockerfile
-    command: 'perl schedule_building.pl --noquiet --nodaemonize --initialize'
+    command: '/bin/bash run_scheduler.sh schedule_building.pl --noquiet --nodaemonize --initialize'
     container_name: server-building-scheduler
     depends_on:
       - mysql
       - memcached
       - beanstalk
+    environment:
+      LACUNA_LOG_DIR: /home/lacuna/server/log
+    logging: *default-logging
     volumes:
       - ./../../bin:/home/lacuna/server/bin
       - ./../../captcha:/home/lacuna/server/captcha
@@ -41,17 +59,21 @@ services:
       - ./../../var:/home/lacuna/server/var
       - ./../../var/www/public/api/api.css:/home/lacuna/server/var/www/public/api/api.css
       - ./../../tmp:/tmp
+      - ./../../log:/home/lacuna/server/log
 
   server-ship-scheduler:
     build:
       context: ./../../
       dockerfile: ./docker/server/Dockerfile
-    command: 'perl schedule_ship_arrival.pl --noquiet --nodaemonize --initialize'
+    command: '/bin/bash run_scheduler.sh schedule_ship_arrival.pl --noquiet --nodaemonize --initialize'
     container_name: server-ship-scheduler
     depends_on:
       - mysql
       - memcached
       - beanstalk
+    environment:
+      LACUNA_LOG_DIR: /home/lacuna/server/log
+    logging: *default-logging
     volumes:
       - ./../../bin:/home/lacuna/server/bin
       - ./../../captcha:/home/lacuna/server/captcha
@@ -61,17 +83,21 @@ services:
       - ./../../var:/home/lacuna/server/var
       - ./../../var/www/public/api/api.css:/home/lacuna/server/var/www/public/api/api.css
       - ./../../tmp:/tmp
+      - ./../../log:/home/lacuna/server/log
 
   server-captcha-scheduler:
     build:
       context: ./../../
       dockerfile: ./docker/server/Dockerfile
-    command: 'perl schedule_captcha.pl --noquiet --nodaemonize'
+    command: '/bin/bash run_scheduler.sh schedule_captcha.pl --noquiet --nodaemonize'
     container_name: server-captcha-scheduler
     depends_on:
       - mysql
       - memcached
       - beanstalk
+    environment:
+      LACUNA_LOG_DIR: /home/lacuna/server/log
+    logging: *default-logging
     volumes:
       - ./../../bin:/home/lacuna/server/bin
       - ./../../captcha:/home/lacuna/server/captcha
@@ -81,6 +107,7 @@ services:
       - ./../../var:/home/lacuna/server/var
       - ./../../var/www/public/api/api.css:/home/lacuna/server/var/www/public/api/api.css
       - ./../../tmp:/tmp
+      - ./../../log:/home/lacuna/server/log
 
   server-script-scheduler:
     container_name: server-script-scheduler
@@ -88,6 +115,7 @@ services:
     depends_on:
       - server
     command: daemon
+    logging: *default-logging
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./schedule.ini:/etc/ofelia.conf
diff --git a/docker/server/etc-dev/log4perl.conf b/docker/server/etc-dev/log4perl.conf
index 216b2ce1..872f4603 100644
--- a/docker/server/etc-dev/log4perl.conf
+++ b/docker/server/etc-dev/log4perl.conf
@@ -1,5 +1,21 @@
-log4perl.logger = DEBUG, SCREEN
+# Dev logging. SCREEN keeps every line in `docker logs server`; FILE persists it
+# to the host-mounted log tree (log/server/lacuna.log) for tailing + rotation.
+#
+# The FILE path is hard-coded rather than read from LACUNA_LOG_DIR: the mount
+# point is invariant under compose and this keeps the config trivially auditable.
+# (etc-test points FILE at /tmp/lacuna-log to match its LACUNA_LOG_DIR override.)
+log4perl.logger = DEBUG, SCREEN, FILE
+
 log4perl.appender.SCREEN = Log::Log4perl::Appender::Screen
 log4perl.appender.SCREEN.stderr = 1
 log4perl.appender.SCREEN.layout = Log::Log4perl::Layout::SimpleLayout
 
+log4perl.appender.FILE = Log::Log4perl::Appender::File
+log4perl.appender.FILE.filename = /home/lacuna/server/log/server/lacuna.log
+log4perl.appender.FILE.mode = append
+log4perl.appender.FILE.mkpath = 1
+log4perl.appender.FILE.autoflush = 1
+log4perl.appender.FILE.recreate = 1
+log4perl.appender.FILE.recreate_check_interval = 30
+log4perl.appender.FILE.layout = Log::Log4perl::Layout::PatternLayout
+log4perl.appender.FILE.layout.ConversionPattern = %d{yyyy-MM-dd HH:mm:ss} [%p] %m%n
diff --git a/docker/server/etc-homelab/log4perl.conf b/docker/server/etc-homelab/log4perl.conf
index 216b2ce1..d70b27bd 100644
--- a/docker/server/etc-homelab/log4perl.conf
+++ b/docker/server/etc-homelab/log4perl.conf
@@ -1,5 +1,19 @@
-log4perl.logger = DEBUG, SCREEN
+# Production logging. INFO (not DEBUG) is the only difference from etc-dev: it
+# keeps the per-request RPC line (lib/Lacuna/RPC.pm, $log->info) but drops the
+# DEBUG chatter, to bound disk. SCREEN -> `docker logs server`; FILE ->
+# host-mounted log/server/lacuna.log, rotated by the logrotate sidecar.
+log4perl.logger = INFO, SCREEN, FILE
+
 log4perl.appender.SCREEN = Log::Log4perl::Appender::Screen
 log4perl.appender.SCREEN.stderr = 1
 log4perl.appender.SCREEN.layout = Log::Log4perl::Layout::SimpleLayout
 
+log4perl.appender.FILE = Log::Log4perl::Appender::File
+log4perl.appender.FILE.filename = /home/lacuna/server/log/server/lacuna.log
+log4perl.appender.FILE.mode = append
+log4perl.appender.FILE.mkpath = 1
+log4perl.appender.FILE.autoflush = 1
+log4perl.appender.FILE.recreate = 1
+log4perl.appender.FILE.recreate_check_interval = 30
+log4perl.appender.FILE.layout = Log::Log4perl::Layout::PatternLayout
+log4perl.appender.FILE.layout.ConversionPattern = %d{yyyy-MM-dd HH:mm:ss} [%p] %m%n
diff --git a/docker/server/etc-test/log4perl.conf b/docker/server/etc-test/log4perl.conf
index 216b2ce1..7497ae67 100644
--- a/docker/server/etc-test/log4perl.conf
+++ b/docker/server/etc-test/log4perl.conf
@@ -1,5 +1,19 @@
-log4perl.logger = DEBUG, SCREEN
+# Test logging. Same shape as etc-dev, but FILE writes under /tmp/lacuna-log to
+# match the LACUNA_LOG_DIR override in docker-compose.test.yml -- the test stack
+# inherits the ./log bind mount but has no logrotate sidecar, so its output is
+# kept off the tracked host tree.
+log4perl.logger = DEBUG, SCREEN, FILE
+
 log4perl.appender.SCREEN = Log::Log4perl::Appender::Screen
 log4perl.appender.SCREEN.stderr = 1
 log4perl.appender.SCREEN.layout = Log::Log4perl::Layout::SimpleLayout
 
+log4perl.appender.FILE = Log::Log4perl::Appender::File
+log4perl.appender.FILE.filename = /tmp/lacuna-log/server/lacuna.log
+log4perl.appender.FILE.mode = append
+log4perl.appender.FILE.mkpath = 1
+log4perl.appender.FILE.autoflush = 1
+log4perl.appender.FILE.recreate = 1
+log4perl.appender.FILE.recreate_check_interval = 30
+log4perl.appender.FILE.layout = Log::Log4perl::Layout::PatternLayout
+log4perl.appender.FILE.layout.ConversionPattern = %d{yyyy-MM-dd HH:mm:ss} [%p] %m%n
diff --git a/lib/Lacuna/Web/Admin.pm b/lib/Lacuna/Web/Admin.pm
index 087633d2..71b5a167 100644
--- a/lib/Lacuna/Web/Admin.pm
+++ b/lib/Lacuna/Web/Admin.pm
@@ -1227,18 +1227,19 @@ sub www_view_logs {
     | <a href="/admin/view/logs?file=weekmedals">Weekly Medals</a>
     ';
     my $log = 'Choose a log file.';
+    my $log_dir = $ENV{LACUNA_LOG_DIR} || '/home/lacuna/server/log';
     given ($request->param('file')) {
         when ('request') {
-            $log = `tail -50 /tmp/lacuna.log`;
+            $log = `tail -50 $log_dir/server/lacuna.log`;
         }
         when ('weekmedals') {
-            $log = `tail -100 /tmp/weekly_medals.log`;
+            $log = `tail -100 $log_dir/cron/weekly_medals.log`;
         }
         when ('summary') {
-            $log = `tail -1000 /tmp/summarize_server.log`;
+            $log = `tail -1000 $log_dir/cron/summarize_server.log`;
         }
     }
-    my $file = '/tmp/lacuna.log';
+    my $file = "$log_dir/server/lacuna.log";
     return $self->wrap($list.'<hr><pre>'.$log.'</pre>');
 }
 
diff --git a/log/cron/.gitkeep b/log/cron/.gitkeep
new file mode 100644
index 00000000..e69de29b
diff --git a/log/deploy/.gitkeep b/log/deploy/.gitkeep
new file mode 100644
index 00000000..e69de29b
diff --git a/log/nginx/.gitkeep b/log/nginx/.gitkeep
new file mode 100644
index 00000000..e69de29b
diff --git a/log/scheduler/.gitkeep b/log/scheduler/.gitkeep
new file mode 100644
index 00000000..e69de29b
diff --git a/log/server/.gitkeep b/log/server/.gitkeep
new file mode 100644
index 00000000..e69de29b