Use autossh and a systemd service…
No need to enable full login shell if the only intended usage is tunneling.