The GeoBlocker app for Nextcloud allows you to block or allow logins from a given range of IP addresses. While bypassing “GeoIP” security features is relatively easy with the use of a VPN (or IP address spoofing), it doesn’t really hurt to have it enabled.
When I use the GeoBlocker app for a given Nextcloud instance, I often use RIRData (local) as the source. It works, it keeps a local database with GeoIP information, and it’s relatively easy to maintain.
There’s a very small, but very important, pitfall here. It is mentioned in the documentation, but it’s easy to miss.
If the nextcloud instance is restarted during the update of the service, the service stays in the update process forever. At the moment you have to use the command line to reset the database of the service and get the service back into a valid state [..]
To fix this, you need to issue this from the CLI:
occ geoblocker:localization-service:reset-db
occ geoblocker:localization-service:update-db
It takes a while to complete, but once it’s done, you’ll have an updated database.