Find a new vps provider for decoy, repoint DNS to new IP. I've done this before, it takes an hour if you already have a backup available, which I recommend.

I just call keystone "local homelab" and decoy "front door" 🤣