Pull request created to fix this issue:
https://github.com/vyos/vyos-1x/pull/4433

Note that the duplicate messages are malformed - including what looks like part of the time stamp at the beginning of the message entry.

I believe this is caused by the /run/rsyslog/rsyslog.conf file including these 2 entries:

• module(load="imklog") # provides kernel logging support
• module(load="imjournal"...

Note that if the version of HAProxy used in Vyos is upgraded to version 2.8 or later (as proposed in T7142), then HTTP/2 is enabled by default and this task can be closed as "overcome by events".

HAProxy documentation for this:

Is this resolved on the latest nightly, now that T7177 has been resolved?

The version of lego in the Debian repositories is very old, and this will likely mean it is broken for various DNS providers since things change rapidly out there on the Internet. As an example, Porkbun DNS provider has recently changed the URL for their DNS API, which has been updated in the newest LEGO, but the old version in the debian repos no longer works for Porkbun. I believe updating LEGO in the debian repos is hard due to needing to bring each go dependency into the repos also - which means the LEGO version is even old in the debian unstable repos.

A key decision in implementing this dns-01 acme authentication feature is whether or not to change the upstream tool used to obtain let's encrypt certificates (currently certbot).

PR submitted: https://github.com/vyos/vyos-1x/pull/4409

Refer to this pull request;
https://github.com/vyos/vyos-1x/pull/4387