feat: add host setup scripts + configs for Intel Alder Lake-N

- scripts/host/setup-host-rustdesk.sh: protect RustDesk ID on host
- scripts/host/README-host.md: instructions for manual apply
- configs/rustdesk2-host.toml.template: config template
- configs/systemd/: systemd units for both VPS and host

configs/systemd/rustdesk-client-local.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=RustDesk Client (local hbbs)
+After=xorg-dummy.service network.target
+
+[Service]
+Type=simple
+User=root
+Environment="DISPLAY=:0"
+Environment="XAUTHORITY=/root/.Xauthority"
+ExecStartPre=/root/write-rustdesk-config.sh
+ExecStartPre=/bin/sleep 2
+ExecStart=/usr/share/rustdesk/rustdesk --server
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target

configs/systemd/rustdesk-hbbr.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=RustDesk Server (hbbr — relay)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/hbbr
+WorkingDirectory=/var/lib/rustdesk-server
+Restart=on-failure
+RestartSec=5s
+
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/rustdesk-server
+
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=rustdesk-hbbr
+
+[Install]
+WantedBy=multi-user.target

configs/systemd/rustdesk-hbbs.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=RustDesk Server (hbbs — ID / NAT relay)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/hbbs
+WorkingDirectory=/var/lib/rustdesk-server
+Restart=on-failure
+RestartSec=5s
+
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/rustdesk-server
+
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=rustdesk-hbbs
+
+[Install]
+WantedBy=multi-user.target