diff --git a/qubes/rw/config/qubes-bind-dirs.d/50_user.conf b/qubes/rw/config/qubes-bind-dirs.d/50_user.conf
index 3804081..cfd2c88 100644
--- a/qubes/rw/config/qubes-bind-dirs.d/50_user.conf
+++ b/qubes/rw/config/qubes-bind-dirs.d/50_user.conf
@@ -1,2 +1,3 @@
 binds+=('/var/lib/docker')
 binds+=('/var/lib/containerd')
+binds+=('/etc/systemd/user/qubes-ssh-socket.service')
diff --git a/qubes/rw/etc/systemd/user/qubes-ssh-socket.service b/qubes/rw/etc/systemd/user/qubes-ssh-socket.service
new file mode 100644
index 0000000..0051981
--- /dev/null
+++ b/qubes/rw/etc/systemd/user/qubes-ssh-socket.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Run a SSH proxy socket to another QubesOS VM
+
+[Service]
+Environment=SSH_VAULT_VM=vault
+ExecStart=%h/.local/bin/qubes-ssh-socket
+Restart=always
+
+[Install]
+WantedBy=multi-user.target