[reedloden]

It's always a good idea to regularly check https://wiki.mozilla.org/Security/Server_Side_TLS and ensure your web servers / load balancers are using the best possible (for your particular users) settings. If you don't have to worry about very old and unpatched WinXP users, going with the "intermediate" compatibility level should be the bare minimum.

Also, don't forget about your clients as well. Things like Ruby and Python each have their own set of SSL/TLS configuration that people always seem to forget about.