I think MS talked about how they handle detection. And it isn’t based on Geolocation, but the choosen install language/region. If you choose one where the DMA applies, you will get the DMA options. For english speakers there should be a Euope (English) install option.

Tho, this does require reinstalling your system.

Yes, but how often does that happen to the average person?

ufw makes it way nicer to use tho. I only use iptables as I have a configuration script I wrote way back in the day.

You can, but you should configure your server in a way that this shouldn’t be a security feature of your setup (e.g. key-auth as OP did). It does help to cut back on uninvited guests a lot tho.

You can set up firewall rules that limit connections to certain ports. For example, you can disallow connections to everything but port 22 (which ssh runs on) to only allow access to the ssh server from outside. Same with VPN.

Read up on ufw (or iptables if you want to do it lower level and have a drink on hand).

I just tried to check the pricing of domains at cloudflare and they just don’t have a list. You need to transfer a domain to see the price. So I will probably stay with inwx for the time being.