Use ssh tunnel

providers.docker.tf

@@ -1,5 +1,5 @@
 provider "docker" {
-  host = "ssh://passing_by_and_thought_id_drop_in.cluster.grey.ooo"
+  host = "tcp://${data.ssh_tunnel.management.local.address}"
   registry_auth {
     address  = "docker.io"
     username = "matthewbaggett"

providers.ssh.tf

@@ -0,0 +1,11 @@
+provider "ssh" {
+  server = { host = "cluster.grey.ooo", port = 22 }
+  user   = "geusebio"
+  auth   = { private_key = { content = try(file("~/.ssh/keys/exploding_bolts_2_rsa"), "") } }
+}
+data "ssh_tunnel" "management" {
+  connection_name = "management"
+  remote = {
+    socket = "/var/run/docker.sock"
+  }
+}