Here's my setup. I have a private network with one public IPv4 address. On this private network, I have two servers, 192.168.1.10 and 192.168.1.20. .10 is my ssh bastion host. I have set up port forwarding so that I can ssh to this server from the internet. I have also set up my ssh config on my workstation so that I can ssh to 192.168.1.20 from the internet as well, via 192.168.1.10. Workstation is not on the private network, it is a machine on the internet.
Here is my goal: I want to be able to connect to an http service on 192.168.1.20 via internet, from my workstation, (just by hitting localhost:8080 or similar) but tunneled over ssh. What tunnel(s) do I need to set up, and on what machines?