Does anyone have any other guides like this? I'm using Arch Linux and want to run nginx on it. I'd like to make sure it's as secure as I can make it before deploying the website.
If you're concerned about running a secure and stable production server, Arch should probably be your last choice.
Don't get me wrong, I think Arch is a fine distro, I just think rolling releases are a scary idea for production servers.
If you want documents around the same level of specificity as the STIGs, you'll probably need a non-governmental source. Arch Linux and Nginx are not EAL certified[1] at any level, so the US Government isn't even going to try to secure them.