This guide is still a WIP, but if the table of contents is any indicator, it’s going to be spectacularly useful once it’s done. Bookmark/star to save for later. See also: the linux hardening checklist