You can find a deployment checklist for Liferay (EE, but applies to CE as well) in the whitepaper section on liferay.com, with this you'll have a quite good starting point.
If you use the bundle, note that tuning (and maintaining) tomcat is still up to you. The bundles are provided for convenience, not assuming maintenance on Liferay's behalf.
In case you're using Liferay EE (and depending on where in the world you are), you can also get help from Liferay (the company), making sure you'll follow the best practices in deployment.
Edit: You might also want to check my series of blog posts with some (naturally not complete) aspects to take care of when setting up and securing Liferay. Chapter 1/4 is here, the other chapters are linked from there.