diff --git a/cygnus_log b/cygnus_log
index e93a6fc..f9bcef4 100644
--- a/cygnus_log
+++ b/cygnus_log
@@ -33,3 +33,5 @@ if i want to restart them i can do `systemctl restart cygnus`, and perhaps if i
 minor note but in the scripts to be run by the system, make sure that things don't depend on environment variables and such unless you really want it. for example use the explicit full path to a program instead of just `fortune` use `/usr/games/fortune` because the environment configures where to look for executables.
 
 installed yt-dl (through apt) and then yt-dlp because yt-dl didn't work https://github.com/yt-dlp/yt-dlp#installation
+
+symlinked the ssh tunnel service into /etc/systemd/system/ so that i get an always-on ssh tunnel!!!
diff --git a/ssh_auriga_tunnel.service b/ssh_auriga_tunnel.service
new file mode 100644
index 0000000..a7f2754
--- /dev/null
+++ b/ssh_auriga_tunnel.service
@@ -0,0 +1,12 @@
+[Unit]
+Description=Make a tunnel so that auriga can ssh here, via bog standard ssh stuff
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/ssh -g -N -T -o VerifyHostKeyDNS=no  -o "ServerAliveInterval 10" -o StrictHostKeyChecking=no -o "ExitOnForwardFailure yes" -R 8090:localhost:22 shoofle@shoofle.net -i /home/shoofle/.ssh/cygnus_to_auriga
+Restart=always
+RestartSec=5s
+
+[Install]
+WantedBy=default.target