Configure pam to allow auto-mounting of encrypted home directories with eCryptfs.
You still need to run the following for an user directory to be encrypted:
modprobe ecryptfs ecryptfs-migrate-home -u username
https://wiki.archlinux.org/title/ECryptfs#Auto-mounting