Cipherli.st Strong Ciphers for Apache, nginx and Lighttpd
Not for the faint of heart or non-sysadmins. I mention it because the news lags behind the latest surveillance outrages of various governments. Your security is your own responsibility.
Network/computer security is a full time job and why your organization should not task someone to be in charge of security as a part-time responsibility or as they have time from other duties.
Over tasking someone with network/computer security is not a sign of thriftiness, only dumbness.