As said in prior pages, the goal here is to make the SSD the home directory, with encryption enabled, as it is not recommended to do it on the eMMC.

So be careful your device does not contain any data you'd like to recover. Mine is brand new so it's not a consideration I have, however I'll still run a couple commands to wipe it.

export DEVICE=/dev/nvme0n1
# Wipe disk
sudo wipefs -a $DEVICE
 
# Make the partition, once in fdisk use g for new GPT table, n for new partition, w to write
# When making the partition, choose the defaults for a full-disk partition
sudo fdisk $DEVICE
g
n
w
 
# Install cryptsetup and use it to encrypt the device with a passkey
sudo apt update && sudo apt install cryptsetup -y
sudo cryptsetup luksFormat $DEVICE
 
# Now open the device with passkey, it should be located at /dev/mapper/crypt_home now
sudo cryptsetup open $DEVICE crypt_home
export VOLUME=/dev/mapper/crypt_home
 
# Add a filesystem to the volume, and add a label
sudo mkfs.ext4 $VOLUME
sudo e2label $VOLUME home
 
# Make temporary mount for migration + configuration
sudo mkdir /mnt/newhome
sudo mount /dev/mapper/crypt_home /mnt/newhome
 
# Migrate data from old home to new home, trailing slashes are important
sudo rsync -aAXv /home/ /mnt/newhome/