nodes/hetz3: configure customer ssh tunnel