DevSec Security Baselines provide battle tested hardening checks for Linux, SSH, nginx, MySQL in cnspec - View it on GitHub