There are many questions on server tuning and security checklist are being closed.
So, I am not asking for the exact detail.
Please point me to the resources you find it is helpful (no matter web server, db server etc) and worth reading (and still relevant, e.g. no more RedHat 6).