Convert ipset script to use nft

But unfortunately, it cannot work with groups, and I would have to add a rule per country in multiple locations.