Our GitLab hardening recommendations: https://docs.gitlab.com/ee/security/hardening.html
Our GitLab security guide: https://docs.gitlab.com/ee/security/
Other resources:
* Rate limits: https://docs.gitlab.com/ee/security/rate_limits.html
* Push rules: https://docs.gitlab.com/ee/user/project/repository/push_rules.html
* Access tokens: https://docs.gitlab.com/ee/security/token_overview.html
* Group permissions: https://docs.gitlab.com/ee/user/group/access_and_permissions.html
* Public access to pages: https://docs.gitlab.com/ee/administration/pages/index.html#disable-public-access-to-all-pages-sites
Also check out our training catalog: https://about.gitlab.com/services/education/admin/