@koakuma I would suggest luks inside LVM, separately for every volume, using same passwords. That allows you to way more easily choose to have since unenxrypted partition in the future (or even now, depending on how you boot that machine) at a imo small chat if having more places to change the passphrase in.