Depends on how you’re currently set up. My intention was to use something like k3s + https://cloudnative-pg.io to handle most of the details for me.
I prefer to version my configs so this approach serves my MO better, even if it is a little more work initially.
Microsoft aren’t exactly big on implementing “the latest” stuff. Not at a keyboard currently but I’d be willing to bet GH doesn’t support TLS1.3 either.