We've had a similar discussion at my work. E-commerce that only ships to North America. So blocking anyone outside of that is an option.
Or I might try and put up Anubis only for them.
Just keep in mind, that could block legit users who are outside the country. One case being someone traveling and wanting to buy something to deliver home. Another case being a non-resident wanting to buy something to send to family in the service zone.
I'm not saying don't block, just saying be aware of the unintended blocks and weigh them.
[dead]
Be slightly careful with commerce websites, because GeoIP databases are not perfect in my experience.
I got accidentally locked out from my server when I connected over Starlink that IP-maps to the US even though I was physically in Greece.
As a practical advice, I would use a blocklist for commerce websites, and allowlist for infra/personal.