Some ideas from Linda Lapinlampi

[northox]

• Remove configuration (maybe, simplifies the script)
• Make shell commands in install instructions consistent (the dollar sign should only be displayed when there's output)
• Fix typo /vas/nsd to /var/nsd
• Add more Markdown code elements to where it's sensible
• Replace (potentially dangerous) $ZONEFILE.tmp and $tmpfile with mktemp(1) (the latter is not POSIX-portable in shell)
• Once ED25519 support is added to ldns, switch to that by default
• Change all cases of rm $LOCKF to rm -f $LOCKF, and others
• Replace SERIAL with some pseudo-serial number usable by NSD in non-signed zones?
• umask 077 where applicable
• Add a manual page (mdoc language)

[northox]

Almost completed with #14. Missing:

• Once ED25519 support is added to ldns, switch to that by default
• Replace SERIAL with some pseudo-serial number usable by NSD in non-signed zones?
• umask 077 where applicable
• Add a manual page (mdoc language)

The others have been discarded for various reasons.