Watch ippsec’s videos he uses it extensively since web servers are pretty big attack surfaces.
There is an article that basically gives this machine to you if you can understand what it is running and what it is doing.
Privesc at least how I did was classic and simple, kind of a let down with how novel(compared to other htb boxes) the initial foothold is.