You can usually find hardening guides for specific OSs. I only have experience with RHEL and Debian. I've used scripts on RHEL based that go through and check all the common points of entry for attackers and provide recommendations. Unfortunately, it takes time and research for some of the recommendations, but well worth it for a long time server. You can even compile all of your settings into a script for the future if you want.