diff --git a/home/workmac.nix b/home/workmac.nix
index 0aff0cb..f2b7969 100644
--- a/home/workmac.nix
+++ b/home/workmac.nix
@@ -94,6 +94,25 @@ in
     + import ./scripts/ssh-loop-fc.nix { inherit pkgs lib; }
   );
 
+  launchd.agents.hydra_proxy = {
+    enable = true;
+    config = {
+      ProgramArguments = [
+        "${lib.getExe pkgs.autossh}"
+        "-M"
+        "0"
+        "-D"
+        "1080"
+        "-oServerAliveInterval=60"
+        "-oControlMaster=no"
+        "-N"
+        "vpn-whq.services.fcio.net"
+      ];
+      # TODO: consider socket activation instead
+      KeepAlive = true;
+      ThrottleInterval = 60;
+    };
+  };
   nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "1password-cli" ];
 
   home.stateVersion = "22.05";