Self deployment docs

We should document adding the public instance as an upstream in case firewalled users still want automatic syncing.