Setting Up Admin Access with WindrosePlus and RCON
Configure admin Steam IDs and the RCON dashboard using the WindrosePlus mod and windrose_plus.json.
Overview
Windrose does not include a built-in admin or RCON system. Admin access is provided by the WindrosePlus mod, which adds an HTTP-based RCON dashboard and Steam ID-based admin authentication. This article assumes WindrosePlus is already installed — see the mods article if you need to install it first.
windrose_plus.json
All WindrosePlus configuration lives in windrose_plus.json at the container root:
/home/container/windrose_plus.json
This file is read live by the server. You do not need to restart after making changes to it.
Configuring Admin Steam IDs
Add the Steam ID(s) of players who should have admin access:
{
"admin_steam_ids": [
"76561198000000001",
"76561198000000002"
],
"rcon_password": "changeme",
"http_port": 8780,
"server": {
"bind_ip": "0.0.0.0"
}
}
Steam IDs must be in SteamID64 format (17-digit numbers). You can find a player's SteamID64 at steamid.io or from the Steam profile URL.
Changes to admin_steam_ids take effect without a server restart — save the file and the server picks up the new list within a short interval.
Setting the RCON Password
Set a strong password for the RCON dashboard:
"rcon_password": "your-secure-password-here"
This password is required to log into the RCON web interface. Do not leave it as the default or use a weak password — the RCON port should also be restricted by firewall to trusted IPs where possible.
Accessing the RCON Dashboard
The WindrosePlus RCON dashboard is an HTTP interface served on port 8780 by default:
http://<server-ip>:8780
Log in using the rcon_password from windrose_plus.json. The dashboard provides server controls, player management, and live log viewing.
To access the dashboard, port 8780 must be:
- Allocated in the Pterodactyl panel for this server.
- Open in the host firewall (see port forwarding article).
Restricting RCON Access
For security, limit access to the RCON port to your own IP address. On a Linux host with iptables:
iptables -A INPUT -p tcp --dport 8780 -s YOUR.ADMIN.IP.HERE -j ACCEPT
iptables -A INPUT -p tcp --dport 8780 -j DROP
Replace YOUR.ADMIN.IP.HERE with your management IP. This ensures only you can reach the dashboard even if the port is allocated in the panel.
Changing the RCON Port
If port 8780 conflicts with another service, change it in windrose_plus.json:
"http_port": 9000
Update the panel port allocation to match, and update any firewall rules. The change takes effect on the next server read cycle (no restart needed for the config file, but a new port allocation requires a restart).
Changing the Bind IP
By default WindrosePlus binds the RCON HTTP server to all interfaces (0.0.0.0). To restrict it to a specific interface:
"server": {
"bind_ip": "10.0.0.5"
}
This is useful if your node has a dedicated management interface.
Removing an Admin
To remove an admin, delete their SteamID64 from the admin_steam_ids array and save the file. The change takes effect immediately without a restart.