SSH Tunnel service

ssh-config

Host myserver.net
    User admin
    HostName myserver.net

Host tunneled_server
    #UserKnownHostsFile /dev/null
    #StrictHostKeyChecking no
    ForwardAgent yes
    HostName localhost
    Port 9001
    ProxyJump myserver.net
    User someuser
    LocalForward 0.0.0.0:8888 0.0.0.0:8888
    LocalForward 0.0.0.0:8080 0.0.0.0:8080

ssh-tunnel.service

[Unit]
Description=Setup a secure tunnel to nemik.net
After=network.target
[Service]
User=someuser
Group=someuser
WorkingDirectory=/home/someuser
ExecStart=/bin/bash tunnel.sh
# Restart every >2 seconds to avoid StartLimitInterval failure
RestartSec=5
Restart=always
[Install]
WantedBy=multi-user.target

tunnel.sh

#!/bin/bash

/usr/bin/ssh -NT -i /home/someuser/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ServerAliveInterval=60 -o ExitOnForwardFailure=yes -R 9001:localhost:22 someuser@myserver.net