Create a template service file at /etc/systemd/system/[email protected]. The template parameter will correspond to the name of target host: (If you want a reverse tunnel change the -L to -R and name the file .../[email protected])
[Unit]
Description=Setup a secure tunnel to %I
After=network.target
[Service]