This POODLE bites: exploiting the SSL 3.0 fallback
Here's relevant nginx configuration to disable SSLv3:  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:EECDH+RC4:RSA+RC4:!MD5;
  ssl_prefer_server_ciphers on;

This ciphersuite is recommended by CloudFlare.