What are common practice's for hardening/securing your server?

https://feddit.de/post/11284137

Run SCAP tool with a STIG baseline.