I think ultimately

Sudo nix-collect-garbage --delete-old

Is my go-to command. For a while I was looking at generations manually, but now I just wait a while (days, a few reboots, or until I need more space) to run this after changing things in case the new stuff is broken.

I think running this as my normal user cleans out old env generations… But I’m not 100% sure.