I recommend that you move to a new VM, spin up a new Discourse, with an empty database (copying over the ssl and letsencrypt directories if you’d like a zero-downtime switch) and restore the current database to the new server. This allows you do to the upgrade with zero downtime and zero risk that something can go wrong.
It’s probably not too soon to upgrade your OS anyway.