Ask HN: What Linux setup/hardening guide do you use?

When setting up a new publicly accessible Linux server, it is usually necessary to make some changes from the defaults to improve security. There are many guides which can be followed, some from presumably reputable sources. However, the details depend quite a bit on Linux distro, version, and the current date.

Considering Ubuntu (22.02 LTS), what setup and hardening guide do you follow?

And if not using Ubuntu, or using a different version, please describe what you use and why (and if being so generous, also what guide you follow).

TIA!