Tl;dr: if you do "set vpn ipsec site-to-site peer @mypeer", you cannot do "run reset vpn ipsec-peer @mypeer".
That's because the "@" symbol is just a mark for VyOS that peer name is not its address, and doesn't actually appear in StrongSWAN configs, but the reset script wrongly assumes otherwise.