Proper way to block all univention from internet


Is there a proper way of bloking all univention configuration sites from the internet and leave only owncloud and let’s encrypt?

I have tried a few settings that I found here and in the Apache documentation but only got it to work with the settings below, however I don’t know if that covers everything:

I have edited /etc/apache2/conf-available/ucs.conf

 <Directory /var/www/>
    Options +Indexes +FollowSymLinks +MultiViews
    AllowOverride AuthConfig Limit FileInfo
    Order deny,allow
    Allow from #Allow only local subnet.
    deny from all

Will this block all the management console and leave accessible only lets encrypt and owncloud (server has only these 2 additional services insalled)

Thank you!

Check this, maybe can help: