If the logfile in /var/log is owned by the obfsproxy user, it can write to it. If puppet has a file resource that makes sure the file exists with the obfsproxy user owning it, and logrotate setting the ownership so when it is rotated it is owned by obfsproxy, then it should be good.