Apache conf to protect private dir in /public for Laravel

lrvl.conf

# ************************************
# Vhost template in module puppetlabs-apache
# Managed by Puppet
# ************************************

<VirtualHost *:80>
  ServerName extranet.sefima.local

  ## Vhost docroot
  DocumentRoot "/var/www/extranet.sefima.local/public"

  ## Directories, there should at least be a declaration for /var/www/extranet.sefima.local/public

  <Directory "/var/www/extranet.sefima.local/public">
    Options Indexes FollowSymlinks MultiViews
    AllowOverride All
    Require all granted
    
    <FilesMatch "\.php$">
      Require all granted
      SetHandler proxy:fcgi://127.0.0.1:9000
      
    </FilesMatch>
    <IfModule mod_php5.c>
    php_admin_value blackfire.server_id "5fc34c5f-767d-4e99-996f-4a9858638c7d"
    php_admin_value blackfire.server_token "3ac2260e038f138a5bca515b72c0205117d886777cf6472b14beabb704e06aa1"
    </IfModule>

  </Directory>
  <Directory "/var/www/extranet.sefima.local/public/private>
  Order allow,deny
  Deny from all
  RewriteRule ^(.*/) - [F,L]
  </Directory>

  ## Logging
  ErrorLog "/var/log/apache2/av_tck5sa7pc5ij_error.log"
  ServerSignature Off
  CustomLog "/var/log/apache2/av_tck5sa7pc5ij_access.log" combined 

  ## Server aliases
  ServerAlias www.extranet.sefima.local

  ## SetEnv/SetEnvIf for environment variables
  SetEnv APP_ENV dev
</VirtualHost>