HighWayToHell

lighttpd:

$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/ca/server.pem"
ssl.ca-file = "/etc/lighttpd/ca/ca.crt"
ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"
ssl.honor-cipher-order = "enable"
ssl.disable-client-renegotiation = "enable"
}

nginx:

server {
listen 443 ssl spdy default_server;
server_name druggo.org;
ssl on;
ssl_certificate /etc/nginx/ca/server.pem;
ssl_certificate_key /etc/nginx/ca/server.key;
ssl_protocols        SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers RC4:HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
keepalive_timeout    60;
ssl_session_cache    shared:SSL:10m;
ssl_session_timeout  10m;
}

test your site with ssllab