diff --git a/targets/vpn/configuration.nix b/targets/vpn/configuration.nix
index 154ff35..fd394c1 100644
--- a/targets/vpn/configuration.nix
+++ b/targets/vpn/configuration.nix
@@ -48,7 +48,11 @@ in
   services = {
     openssh = {
       enable = true;
-      settings.PasswordAuthentication = false;
+      settings = {
+        PasswordAuthentication = false;
+        AllowTcpForwarding = "yes";
+        AllowAgentForwarding = "yes";
+      };
     };
 
     cloud-init.enable = lib.mkForce false;