While I did not read this properly yet, it seems like a good primer. There is also a great set of ansible playbooks and roles that should cover this and more t

While I did not read this properly yet, it seems like a good primer. There is also a great set of ansible playbooks and roles that should cover this and more that is a good base for Linux servers: https://github.com/dev-sec/ansible-collection-hardening https://github.com/dev-sec/ansible-collection-hardening