For FDE including /boot you’ll need to use GRUB2, from what I remember it only supports luks1 in mainline, so you’ll need a grub fork that supports luks2. Arch wiki will have all of that information. For Windows encryption I have no idea if you can use Veracrypt on your C: partition, but using it on the shared data portion will work. I also remember reading that Veracrypt slows down the reading and writing of that partition a lot. Again arch wiki will have that info.
Heretic and Lichdom: Battlemage