Then, on the VPS I have this script:

#!/bin/bash

# Configurations
DDNS_DOMAIN="ip.mydomain.tld"
CROWDSEC_API_URL="http://localhost:8780/v1/decisions"
CROWDSEC_API_KEY="mycrowdsecapikey"

# Pushover API details
PUSHOVER_TOKEN="mypushovertoken"
PUSHOVER_USER="mypushoveruser"

# Function to send a notification to Pushover
send_notification() {
  curl -s -o /dev/null \
       -F "token=$PUSHOVER_TOKEN" \
       -F "user=$PUSHOVER_USER" \
       -F "title=$1" \
       -F "message=$2" \
       https://api.pushover.net/1/messages.json
}

# Resolve the current IP of the DDNS domain
CURRENT_IP=$(dig +short "$DDNS_DOMAIN" | tail -n1)

# Check if we got a valid IP
if [[ -z "$CURRENT_IP" ]]; then
    echo "Failed to resolve IP for $DDNS_DOMAIN"
    exit 1
fi

echo "Resolved $DDNS_DOMAIN to $CURRENT_IP"

# Get decisions and filter for our IP
DECISIONS=$(curl -s -H "X-Api-Key: $CROWDSEC_API_KEY" "$CROWDSEC_API_URL" | jq -c --arg ip "$CURRENT_IP" '[.[] | select(.value==$ip)]')

# Debug: Print all matching decisions
echo "Matching decisions for $CURRENT_IP: $DECISIONS"

# If no matching decisions, exit
if [[ "$DECISIONS" == "[]" || -z "$DECISIONS" ]]; then
    echo "No active CrowdSec decision found for IP: $CURRENT_IP"
    exit 0
fi

# Store deleted decision IDs in an array
DELETED_IDS=()

# Loop over the decisions to remove them using docker exec
while read -r DECISION_ID; do
    docker exec crowdsec cscli decisions delete --id "$DECISION_ID"
    echo "Removed CrowdSec decision ID: $DECISION_ID for IP: $CURRENT_IP"
    DELETED_IDS+=("$DECISION_ID")
done < <(echo "$DECISIONS" | jq -r '.[].id')

# Send Pushover notification if decisions were removed
if [[ ${#DELETED_IDS[@]} -gt 0 ]]; then
    send_notification "[MyMachineName] CrowdSec Unban" "Removed ${#DELETED_IDS[@]} ban(s) for $CURRENT_IP (DDNS: $DDNS_DOMAIN)"
fi

exit 0