Encrypted rootfs

Hello.

How to encrypt rootfs partition on Khadas Vim2 (Ubuntu, 4.9)?

I know, I must have a /boot partition, but fenix create this partion only for usb/sd card.

How to change fenix scripts to create /boot on separate partion?