If you use encryption only on /home,then mounting /home on login works for both Dm-crypt and fscrypt but 66 services fail(directory not found error) because ~/.66 directory needs to be accessible earlier in the boot process (can someone explain more on this?).So,mounting on login didn't really work well for me, consider using crypttab
This now can be possible with the utlogd daemon (
https://web.obarun.org/software/utlogd/latest/). You can activate your user and launch a script which unencrypt the /home directory at logging time.
Simple to use, simple to understand but efficient....
Also, available on the observice repo:
https://framagit.org/pkg/observice/utlogd-66serv/-/blob/master/trunk/utlogd