I'm aware of proxy jump and other client side config but I'd rather that not every single client need to do this configuration.