How to redirect user based on country code?

Question

Nginx

Task:
Redirect the user to another site depending on the country where the request comes from.
The obvious solution was to use the nginx-module-geoip module and GeoLite2 bases. As you could understand, nothing works, and I don’t understand how to debug it.
What I did: I
installed the library 'yum install geoip geoip-devel', the module itself installed 'yum install nginx-module-geoip'
In the nginx.conf config, added the line 'load_module modules/ngx_http_geoip_module.so;'
In http context added 'geoip_country /usr/share/GeoIP/GeoIP.dat;'
In the server context added if:
if ($geoip_country_code = "RU") {
return 404;
}
404 returned for testing.
Help me figure out what I'm doing wrong?
Output of nginx -V:
nginx version: nginx/1.16.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC)
built with OpenSSL 1.0.2k-fips 26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx. conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx. pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/ var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx -- group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module--with-stream_ssl_preread_module --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord -gcc-switches -m64 -mtune=generic -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -pie'

Answer 1

work through a lot of text
https://www.digitalocean.com/community/tutorials/h...
https://medium.com/@azole/how-to-redirect-visitors...
https://forum.nginx. org/read.php?9.238190

Answer 2

It turned out I did everything right. Except that the server I have is behind a reverse proxy.