diff --git a/packstack/puppet/templates/horizon.pp b/packstack/puppet/templates/horizon.pp
index f9268bb89..3b8d4311c 100644
--- a/packstack/puppet/templates/horizon.pp
+++ b/packstack/puppet/templates/horizon.pp
@@ -44,6 +44,13 @@ class {'::horizon':
   },
 }
 
+File <| path == $::horizon::params::config_file |> {
+  ensure  => present,
+  owner   => 'root',
+  group   => $::horizon::params::apache_group,
+  mode    => 0640,
+}
+
 if $horizon_ssl {
   apache::listen { '443': }
 }