[stigz]

This article starts with an Arch-based system. I think it should be noted that the Arch wiki also has its own recommendations for hardening. [1]

[1] https://wiki.archlinux.org/title/Security