docs: document installation, secrets and setup steps

nixos/modules/dns.nix

@@ -80,17 +80,21 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = [ config.services.bind.listenOnPort ];
+    environment.persistence."/persist".directories = [
-    networking.firewall.allowedUDPPorts = [ config.services.bind.listenOnPort ];
+      {
+        directory = "/var/dns";
+        group = "named";
+        user = "named";
+      }
+    ];
 
-    environment.persistence."/persist" = {
+    networking.firewall =
-      directories = [
+      let
-        {
+        ports = [ config.services.bind.listenOnPort ];
-          directory = "/var/dns";
+      in
-          group = "named";
+      {
-          user = "named";
+        allowedTCPPorts = ports;
-        }
+        allowedUDPPorts = ports;
-      ];
+      };
-    };
   };
 }