diff --git a/ops/nixos/bvm-netbox/default.nix b/ops/nixos/bvm-netbox/default.nix
index a6215a196f..9d8b336b1b 100644
--- a/ops/nixos/bvm-netbox/default.nix
+++ b/ops/nixos/bvm-netbox/default.nix
@@ -220,5 +220,15 @@ in {
     };
   };
 
+  users.groups.ninovpn = {};
+  users.users.ninovpn = {
+    group = "ninovpn";
+    isNormalUser = true;
+    openssh.authorizedKeys.keys = [
+      "command=\"/bin/false\",restrict,port-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISTSUEIzxpqa9kZwfryFlYA5FJaHJiDJHnw13Vg4NHg root@nino-010-worker"
+      "command=\"/bin/false\",restrict,port-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGK5a+5jekPlsI+44PCy9CZWQFqFzNVEuCo4LVZxo3O root@nino-011-worker"
+    ];
+  };
+
   system.stateVersion = "21.05";
 }