Using an Apache server you can create Virtual Hosts, in which you can redirect a server URL to be served from another directory as mentioned in this apache documentation
# Ensure that Apache listens on port 80
Listen 80
<VirtualHost *:80>
DocumentRoot "/www/example1"
ServerName www.example.com
# Other directives here
</VirtualHost>
<VirtualHost *:80>
DocumentRoot "/www/example2"
ServerName www.example.org
# Other directives here
</VirtualHost>
In this sample file two applications run on the same server with different urls and different directories, the URL does not necessarily have to be different domains, they may be just folders, I've done using only different folders.
The DocumentRoot for you will be the folder where the laravel is, the servername is your url. This is worth taking a look at the Aliases and Directory directives that control URL access.
Still regarding the configuration files because they are not in the public folder they should already be safe, if you think you need more security you can pass the settings to Apache as environment variables and accessing them through PHP with $ _ ENV .
If you are using NGINX it also allows this type of operation.