Ensure correct permissions of horizon.log
diff --git a/horizon/server/single/init.sls b/horizon/server/single/init.sls
index 63b0429..cd3ff86 100644
--- a/horizon/server/single/init.sls
+++ b/horizon/server/single/init.sls
@@ -115,7 +115,7 @@
   - watch:
     - file: horizon_config
     - file: horizon_apache_config
-    - file: horizon_log_dir
+    - file: horizon_log_file
 
 horizon_log_dir:
   file.directory:
@@ -124,6 +124,15 @@
     - group: adm
     - mode: 750
 
+horizon_log_file:
+  file.managed:
+    - name: /var/log/horizon/horizon.log
+    - user: horizon
+    - group: adm
+    - mode: 640
+    - require:
+      - file: horizon_log_dir
+
 {%- if server.get('api_versions', {}).identity is defined %}
 
 horizon_keystone_policy: