My first concern would be using a digital ocean droplet as a VPN. Last time I tried that, datacenter IP ranges often made things slower or unusable.
you could use an azure VDI machine as a cloud endpoint, i believe those ips are flagged correctly. It’s not this cheap though.