diff --git a/src/config/types.ts b/src/config/types.ts
index 372e936d4..5eadd307b 100644
--- a/src/config/types.ts
+++ b/src/config/types.ts
@@ -940,6 +940,10 @@ export type GatewayRemoteConfig = {
   token?: string;
   /** Password for remote auth (when the gateway requires password auth). */
   password?: string;
+  /** SSH target for tunneling remote Gateway (user@host). */
+  sshTarget?: string;
+  /** SSH identity file path for tunneling remote Gateway. */
+  sshIdentity?: string;
 };
 
 export type GatewayReloadMode = "off" | "restart" | "hot" | "hybrid";
diff --git a/src/config/zod-schema.ts b/src/config/zod-schema.ts
index 7396417c2..2655bb573 100644
--- a/src/config/zod-schema.ts
+++ b/src/config/zod-schema.ts
@@ -1333,6 +1333,8 @@ export const ClawdbotSchema = z.object({
           url: z.string().optional(),
           token: z.string().optional(),
           password: z.string().optional(),
+          sshTarget: z.string().optional(),
+          sshIdentity: z.string().optional(),
         })
         .optional(),
       reload: z