

Do a search for you server OS + STIG
Then, for each service you’re hosting on that server, do a search for:
Service/Program name + STIG/Benchmark
There’s tons of work already done by the vendors in conjunction with the DoD (and CIS) to create lists of potential vulnerable settings that can be corrected before deploying the server.
Along with this, you can usually find scripts and/or Ansible playbooks that will do most of the hardening for you. Though it’s a good Idea to understand what you do and do not need done.
Also there are fast food alternatives to McDonalds as well.
IMO, Wendy’s has much better burgers. Haven’t had Carl’s Jr’s in a long while but I remember their “$6 Burgers” were pretty good.
Burger King, the meat quality seems to have gone downhill. Like an unchewable but in each meat patty. They used to be my favorite.
Edit: the “$6 burger” is now called the thick burger since it now costs more than $6