A number of Github repos of code meant to be used to harden servers in various ways prior to deployment.
A page that teaches you just enough Ruby to let you use Chef.
SoloWizard is an interactive website which lets you check off the things you do and don't want on a new MacOSX machine, and it'll generate a shell script (which you can and should inspect for veracity) that will install Chef locally, pull down the appropriate cookbooks, and set up the machine. Helps automate workstation construction, minimizes craft error in some important ways. Be sure that the cookbooks it uses are compatible with your release of OSX, though.