add TPA-RFC-39: Nextcloud user account policy (nextcloud#10)

policy.md

@@ -21,6 +21,7 @@ and add it to the above list.
  * [TPA-RFC-36: Gitolite, GitWeb retirement](policy/tpa-rfc-36-gitolite-gitweb-retirement)
  * [TPA-RFC-37: Lektor replacement](policy/tpa-rfc-37-lektor-replacement)
  * [TPA-RFC-38: Setting Up a Wiki Service](policy/tpa-rfc-38-new-wiki-service)
+ * [TPA-RFC-39: Nextcloud account policy](policy/tpa-rfc-39-nextcloud-account-policy)
 
 ## Proposed
 

policy/tpa-rfc-39-nextcloud-account-policy.md

+---
+title: TPA-RFC-39: Nextcloud user account policy
+---
+
+[[_TOC_]]
+
+Summary: This policy defines who is entitled to a user account on the Tor
+Project Nextcloud instance.
+
+# Background
+
+As part of proper security hygiene we must limit who has access to the Tor
+Project infrastructure.
+
+# Proposal
+
+Nextcloud user accounts are available for all [Core Contributors](https://gitweb.torproject.org/community/policies.git/tree/membership.txt).
+Other accounts may be created on a case-by-case basis (eg. for bots).
+
+# Approval
+
+Nextcloud administrators and TPA should sign off on this policy.
+
+# Status
+
+This proposal is currently in the `draft` state.
+
+# References
+
+See [policy/tpa-rfc-1-policy](policy/tpa-rfc-1-policy).