diff --git a/ops/nixos/lib/home-manager/common.nix b/ops/nixos/lib/home-manager/common.nix
index 8e394bc497..5da264a1ae 100644
--- a/ops/nixos/lib/home-manager/common.nix
+++ b/ops/nixos/lib/home-manager/common.nix
@@ -62,6 +62,9 @@ in
         hostname = ip;
         extraOptions.setEnv = "TERM=xterm-256color";
       };
+      blast-jump-tmpl = ip: via: (blast-tmpl ip) // {
+        proxyJump = via;
+      };
     in ({
       sar1 = {
         hostname = "172.16.0.1";
@@ -79,9 +82,13 @@ in
       };
 
       blast-worker1 = blast-tmpl "10.200.109.10";
+      blast-worker1-jump = blast-jump-tmpl "10.200.109.10" "blast-csgo1-jump";
       blast-worker2 = blast-tmpl "10.200.109.11";
+      blast-worker2-jump = blast-jump-tmpl "10.200.109.11" "blast-csgo2-jump";
       blast-csgo1 = blast-tmpl "10.200.109.12";
+      blast-csgo1-jump = blast-jump-tmpl "10.222.0.2" "bvm-netbox";
       blast-csgo2 = blast-tmpl "10.200.109.13";
+      blast-csgo2-jump = blast-jump-tmpl "10.222.0.3" "bvm-netbox";
 
       whitby = {
         hostname = "whitby.tvl.fyi";