The Better Crypto project aims to provide copy&paste crypto best practices for sysadmins for common setups, e.g. apache, iis, dovecot, etc..
https://bettercrypto.org/
There’s a PDF with easy copy&paste configurations at
https://bettercrypto.org/static/applied-crypto-hardening.pdf