Andrius Štikonas

Regarding /boot, it can be encrypted as long as your bootloader can decrypt it, for example GRUB can decrypt LUKS encrypted partitions (albeit somewhat slowly). And the only partition that really has to be unencrypted is UEFI system partition (ESP), where bootloaders are located.

It really depends on your requirements...

But a few useful points:

1. Use GPT partition table and not MBR. Everything will be simpler, no need for extended/logical partitions.
2. If you need to be able to do online (mounted) partition resizing, pick btrfs. Ext4 can only grow them online but not shrink.
3. Make sure your partition boundaries are 1 MiB aligned.
4. If you need more advanced setups, consider using LVM.