Create a template service file at /etc/systemd/system/secure-tunnel@.service. The template parameter will correspond to the name of target host: (If you want a reverse tunnel change the -L to -R and name the file .../secure-reverse-tunnel@.service)
[Unit]
Description=Setup a secure tunnel to %I
After=network.target
[Service]