Unlocking encrypted home over ssh / on X11 login.

I have a new system that I want to install -current on, and it's something of a mini-server that I want to be always on and remotely accessible. Ideally I'd like an encrypted home directory with two features:

1) The ability to log in over ssh and unlock it if needs be (e.g., after a remote reboot).

2) Unlock the home directory after entering my user password to log in to X11.

What's the state of play with encrypted home directories on Slack these days? Are these things possible?