I'm not an expert myself, but regarding cleaning up your logs, I'd let journalctl do it for you.
Toward the end of that post, Aravisian mentions using the --vacuum arguments to instruct journalctl to clear out all but 100 MB of logs. This is likely cleaner than truncate, which just hacks off the end of a file with no respect to its contents.