The problem

You get access to a new environment on your first day. Only bastion.example.com accepts SSH from your laptop. The database host db.internal runs PostgreSQL on port 5432 and accepts connections only from the bastion.

Your user is ana on the laptop and on both hosts. The laptop has a folder reports/ with jan.csv and q3/sep.csv. On the bastion, the app writes /var/log/app.log, and /srv/reports/ holds an old file old.csv from last month.