Do a search for you server OS + STIG

Then, for each service you’re hosting on that server, do a search for:

Service/Program name + STIG/Benchmark

There’s tons of work already done by the vendors in conjunction with the DoD (and CIS) to create lists of potential vulnerable settings that can be corrected before deploying the server.

Along with this, you can usually find scripts and/or Ansible playbooks that will do most of the hardening for you. Though it’s a good Idea to understand what you do and do not need done.

Reminds me of Coffee Stain Studio’s trailer for the release of Goat MMO Simulator:

https://youtu.be/WAm5yxQA_HY

Hmm no boot drive found, press F1 to play Doom instead!

Kinda like the Sega Master System. If you turned it on without a game and pressed UP + A + B at the screen telling you to put in a game cartridge, it launches a game where you guide a snail through a maze:

https://youtu.be/Fz4YnEWpK10