Guides
Practical guides
Short, specific write-ups about doing these jobs well — written by the people who run the tools.
Certificate expiry is the outage you can always avoid
Why sites go down on a date nobody wrote down, and the five-minute fix.
The six security headers worth setting (and what each one buys you)
A practical order to add them in, with the values most sites should use.