Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
World desk12 min

How to Schedule RCON Commands on a Soulmask Server

A practical guide to scheduling Soulmask RCON commands securely, from enabling and testing RCON to recurring saves, backups, 38run bundles, logging, and recovery.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To schedule Soulmask maintenance, enable RCON with a password and port, restrict it to trusted IP addresses, prove one command works manually, then run that command from a hosting-panel task, Linux cron, Windows Task Scheduler, or a private container. Use a 38run script when one schedule must execute several commands, and keep the RCON endpoint off the public internet whenever possible.

What scheduled RCON can do

RCON is a remote console interface for server administration. A scheduler connects to that interface at a chosen time and submits a command, so routine maintenance does not depend on an administrator being online. Typical uses include saving the world before a restart window, creating a named archive, writing an hourly archive, checking server status, or running a short maintenance bundle.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The remote interface is not identical to the in-game administrator console. Soulmask’s command reference warns that RCON exposes a remote command set rather than the complete gm command set. Treat every command as an explicit compatibility check: a command that works in an in-game console is not automatically available through RCON.

Requirements before creating a schedule

  • Administrative access to the Soulmask server’s startup arguments or configuration files.
  • A fixed RCON password stored outside public scripts, repositories, chat messages, and process listings.
  • The RCON port actually configured on the server. The documented default is 19000, but a provider’s or administrator’s configured value is authoritative.
  • A scheduler that can reach the server: a hosting panel, the Linux host, a Windows host, or a private container on the same network.
  • A tested RCON client and a location for logs.
  • Enough disk space for the archives you intend to retain, plus a way to copy important backups away from the game-server disk.

Provider panels and command names can change between versions. Record the exact server version, panel labels, RCON port, source IP of the scheduler, and backup directory before automating production maintenance.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Enable RCON and restrict who can connect

1. Add the RCON startup options

Start the server with a password and port in its launch configuration:

-rconpsw=use-a-long-unique-secret -rconport=19000

The password is an example value only; generate your own secret. If another service already uses port 19000, choose an available port and use that same value everywhere else. Restart the server after changing startup arguments.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Allow only trusted source addresses

In WS/Saved/Config/LinuxServer/Engine.ini, configure the [Server.SafeIP] allowlist with the address or addresses that are allowed to open RCON connections. Use the syntax supplied by your server build or host rather than copying an unrelated configuration example. For a scheduler on the same machine, allow the loopback or private host address as appropriate; for a separate scheduler, allow its private address.

Do not treat an allowlist as a replacement for a password. Use both the allowlist and a host firewall. A firewall rule should admit the RCON port only from the scheduler’s private address or management network and should deny unsolicited internet traffic.

3. Keep the endpoint private

One hosting provider’s guidance states: “By default, we don’t allocate you an external port for Soulmask RCON as it’s insecure.” That is a useful default. Do not expose RCON through a public address merely to make scheduling convenient. If remote administration is necessary, reach the private address through a VPN or another authenticated management path.

The ura command can change allowed addresses according to the documented command reference, but that change is not retained after a restart. Make persistent access changes in Engine.ini and verify them after every update or reboot.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Test one command manually first

Automating an untested command makes failures harder to diagnose. From the same machine or container that will run the schedule, connect with your RCON client and issue a harmless command such as help or a status query. A generic client invocation looks like this; option names differ between clients:

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
rcon-cli --address 127.0.0.1 --port 19000 --password "$SOULMASK_RCON_PASSWORD" help

Replace the address and port with the server’s configured values and use the client syntax documented for your chosen RCON program. A successful response confirms network reachability, authentication, and basic command handling. Then test the intended maintenance command manually, preferably during a maintenance window:

rcon-cli --address 127.0.0.1 --port 19000 --password "$SOULMASK_RCON_PASSWORD" saveworld

Watch the server console and the RCON client’s exit status. Confirm that the expected save or archive appears before adding a recurring task. Never infer success solely from a scheduler saying that it launched a process.

Choose where the scheduler runs

Method Best fit Secret handling Recurrence and retries Logging and recovery
Hosting-panel scheduled task Managed servers where the provider exposes an RCON action Stored by the provider’s task system; review its access controls Panel-defined intervals; retry and overlap controls vary Usually task logs; backup rollback depends on the provider
Linux cron or systemd timer Self-hosted Linux servers Protected environment file or secret store Precise schedules; add your own lock, retry, and alert logic Host logs and command output; you control retention
Windows Task Scheduler Self-hosted Windows servers Protected environment variable, credential store, or service account Triggers, repetition, timeout, and restart options are configurable Task History plus a script log; recovery is your responsibility
Private container or sidecar Containerized deployments Container environment or an orchestrator secret Scheduler image and orchestrator determine behavior Container logs and persistent host storage; image maintenance is required

Make the scheduler’s network location part of the design. A panel task may run from provider infrastructure rather than your game host, while a cron job normally runs beside the server. That difference determines which source IP belongs in [Server.SafeIP] and which firewall rule is needed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Schedule RCON from a hosting panel

Some Soulmask hosting panels provide a scheduled-task action that sends an RCON command. A documented panel workflow is:

  1. Open the Soulmask server in the hosting control panel.
  2. Open the scheduled-tasks or automation area and create a new task.
  3. Select the RCON action rather than a shell, restart, or chat action.
  4. Enter one tested command, such as saveworld or backuphour.
  5. Choose the run time and recurrence. A world-backup example uses a 12-hour interval.
  6. Save or enable the task.
  7. After its first due time, inspect the task log and verify the resulting save or archive on disk.

Exact labels, timezone controls, and recurrence choices differ by provider. Check whether the panel interprets times as UTC or local time, whether it prevents overlapping runs, and whether a failed RCON connection is retried. If the panel offers no retention or rollback feature, copy important archives to independent storage.

Schedule from Linux with cron

Store the password securely

Do not put the password directly in a world-readable crontab. Create a root-owned environment file, for example /etc/soulmask/rcon.env, restrict it to the account that runs the task, and load it from a wrapper script. The file should contain only the secret and non-public connection settings, such as:

SOULMASK_RCON_PASSWORD=replace-with-your-secret
SOULMASK_RCON_HOST=127.0.0.1
SOULMASK_RCON_PORT=19000

Set restrictive permissions and do not commit this file to source control. If your operating system or hosting platform provides a secret store, use that instead.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Create a wrapper with an explicit exit status

A wrapper makes logging and failure handling consistent. The following shell example assumes an RCON client at /usr/local/bin/rcon-cli; adjust the executable and flags to that client’s documentation:

#!/bin/sh
set -eu
. /etc/soulmask/rcon.env
exec /usr/local/bin/rcon-cli 
  --address "$SOULMASK_RCON_HOST" 
  --port "$SOULMASK_RCON_PORT" 
  --password "$SOULMASK_RCON_PASSWORD" 
  saveworld

Save it as /usr/local/sbin/soulmask-saveworld, make it executable, and run it interactively. A nonzero exit status should mean the scheduler records a failure.

Add the recurrence

Edit the crontab for the intended service account. This entry runs a save every 12 hours at the start of the hour and appends both standard output and errors to a log:

0 */12 * * * /usr/local/sbin/soulmask-saveworld >> /var/log/soulmask-rcon.log 2>&1

For an hourly archive named with the current UTC date and hour, create a second wrapper that calls backuphour and schedule it at a minute that does not collide with the save, such as:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
5 * * * * /usr/local/sbin/soulmask-backuphour >> /var/log/soulmask-rcon.log 2>&1

Use log rotation so a failed connection cannot fill the disk. If a command can run longer than its interval, add a lock with your platform’s standard locking tool or use a systemd timer with a service-level timeout; do not allow two maintenance commands to overlap accidentally.

Schedule from Windows Task Scheduler

Create a PowerShell wrapper

Store the password in a protected environment variable or Windows credential mechanism, not in the task’s command-line arguments. A wrapper can stop on errors and return a failure to Task Scheduler:

$ErrorActionPreference = 'Stop'
$client = 'C:Toolsrcon-cli.exe'
$address = '127.0.0.1'
$port = '19000'
& $client --address $address --port $port --password $env:SOULMASK_RCON_PASSWORD saveworld
if ($LASTEXITCODE -ne 0) {
    throw "Soulmask RCON returned exit code $LASTEXITCODE"
}

Test the script in the same account that will run the task. The account needs permission to execute the client, read the secret, and write the log.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Create the repeating task

  1. Open Task Scheduler and choose Create Task, not the limited basic wizard if you need detailed controls.
  2. On General, select an account with the required file and network permissions and choose whether the task runs only when that user is logged on.
  3. On Triggers, create a daily trigger, enable Repeat task every, and set the duration to the intended maintenance window.
  4. On Actions, choose Start a program, point it to powershell.exe, and pass the script path in the arguments.
  5. On Conditions and Settings, disable sleep-related restrictions where appropriate, set a timeout, enable history, and choose what happens if a run is missed or already running.
  6. Run the task manually, inspect History, and verify the server log and backup output.

Use a task action that starts the script rather than embedding the RCON password in the action arguments. Keep the script and its log directory access-controlled.

Schedule in a container deployment

The community-maintained jsknnr Soulmask container documents RCON_ADDRESS, RCON_PORT, and RCON_PASSWORD environment variables; its documented default RCON port is 19000. It also recommends persistent storage at /home/steam/soulmask. Set the address, configured port, and secret through the container runtime or an orchestrator secret, and keep the game data on persistent storage.

Run the scheduler on the host or in a sidecar container attached to a private network. Confirm that the sidecar can resolve and reach the game container’s RCON address, and place the sidecar’s source address in the server allowlist. Do not publish the RCON port through the container’s public ingress just because the application has a port-mapping option. Community images are not official Soulmask components, so review image changes and test updates before applying them to a production server.

Run several commands with a 38run script

When a maintenance window needs more than one command, the command reference documents 38run <ScriptFileName>. Put a plain command list in the server’s WS/Saved directory, then invoke that file through RCON. For example, a file named nightly-maintenance.txt can contain:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
saveworld
backuphour

After testing each line independently, invoke the bundle:

rcon-cli --address 127.0.0.1 --port 19000 --password "$SOULMASK_RCON_PASSWORD" 38run nightly-maintenance.txt

Use a separate file for a different retention policy or maintenance window. Keep the file owned by the server administrator, review every line as code, and do not assume that all in-game commands are valid in a remote script. If the server reports an unknown command, remove it and test the remaining sequence individually.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Useful maintenance commands and what they mean

Command Purpose Scheduling note
saveworld Saves the world without exiting the server. Useful before restarts or before a separate archive operation.
backup <new_database_name> Writes a named world archive. Use a unique, meaningful name such as nightly_2026_10_15; confirm the server’s accepted naming rules.
backuphour Writes a world archive named with the current UTC date and hour. Convenient for hourly schedules; plan retention so archives do not consume all available disk space.
help Displays available remote commands. Good for a manual connectivity test, not normally a recurring task.
serverfps Reports server frame-rate information. Schedule only if you have a monitoring system that records and interprets the result.
List_OnlinePlayers or lp Lists connected players. Useful for an on-demand check; avoid noisy recurring output unless it is being logged intentionally.

Permission-management commands are also listed in the command reference. Do not automate a permission change unless you understand its persistence, scope, and recovery path.

Design backup timing and retention

Separate save timing from archive timing

A world save and an archive serve different purposes. A save flushes current state without exiting; an archive creates a recoverable copy. You can schedule a save before a restart and use backuphour for regular archives, but avoid launching both at exactly the same second unless your server and client tests show that concurrent requests are safe.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use names that identify the recovery point

For named archives, include a date or maintenance-window identifier in the database name. Keep the timezone explicit in your operations notes. backuphour uses the current UTC date and hour, so do not interpret its filename as local time without converting it.

Plan storage and off-host copies

RCON scheduling does not itself provide off-site durability, retention, or rollback. Measure how quickly your archive directory grows, set a retention policy, and copy important archives to storage that is not on the same game-server disk. Before deleting old files, restore one archive on a test instance and document the recovery steps.

Security practices that prevent common failures

  • Use a long, unique RCON password and rotate it after staff or hosting changes.
  • Allow only scheduler addresses in [Server.SafeIP] and the host firewall.
  • Prefer loopback or private addresses; do not publish RCON through a public port-forward.
  • Keep secrets out of shell history, source repositories, screenshots, task arguments, and process lists.
  • Run the scheduler with the least filesystem and network privileges needed to execute the command and write logs.
  • Review logs for failed authentication and unexpected source addresses.
  • After a server restart, verify that persistent allowlist settings still apply; runtime address changes made with ura do not survive a restart.

Logging, retries, and alerts

A reliable schedule records four facts for every attempt: start time, command, exit status, and server response. The wrapper examples send output to a log, but production operations should also rotate that log and alert on nonzero exits. A scheduler that retries immediately can create overlapping saves or duplicate archives, so use a bounded retry count with a delay and a lock.

Do not mark a job successful merely because the RCON client connected. Where practical, check the server response and verify that a new archive or changed file timestamp appears in the expected directory. If the server is restarting, let the scheduler report a failed attempt and retry during the next controlled window rather than repeatedly hammering a closed port.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshooting scheduled commands

Symptom Likely cause Action
Connection refused RCON is disabled, the port is wrong, or the server is restarting. Check startup arguments, the configured port, server status, and firewall rules. Test locally before testing remotely.
Authentication failure Password mismatch or a stale secret in the scheduler. Update the protected secret and confirm the scheduler is reading the intended environment or credential store.
Connection times out Firewall, private-network routing, or an incomplete allowlist. Identify the scheduler’s source IP and permit only that address in the firewall and [Server.SafeIP].
Unknown command The command is not exposed through RCON even if it exists in the in-game gm set. Run help, consult the server’s RCON command reference, and replace the command with a supported one.
Task runs but no archive appears The task account lacks write access, the command failed, or the archive path was misunderstood. Inspect client and server output, check disk space and permissions, and run the command manually under the same account.
Works manually but not on schedule Different user, working directory, environment, timezone, or network namespace. Use absolute paths, load the protected environment explicitly, record the scheduler timezone, and test with the scheduler’s identity.
Duplicate or overlapping jobs Retry interval is shorter than command duration or multiple schedulers are enabled. Disable duplicate tasks, add a lock, and set a timeout and non-overlap policy.
Access disappears after reboot An address was changed at runtime rather than persisted. Restore the intended entries in Engine.ini under [Server.SafeIP] and restart once to verify persistence.

Preflight checklist

  • RCON starts with the intended password and configured port.
  • The scheduler’s source address is allowlisted and firewall-approved.
  • A manual help request succeeds from the scheduler host.
  • The exact maintenance command succeeds manually and produces the expected result.
  • The secret is protected and absent from command history and repositories.
  • The schedule’s timezone and recurrence are documented.
  • Logs capture output, exit status, and timestamps, with rotation and alerting configured.
  • Overlapping runs are prevented.
  • Archives have enough disk space, a retention policy, and an off-host copy plan.
  • A restore test has been performed on a non-production instance.

Limits to keep in mind

There is no published reliability percentage or universal maximum scheduling frequency for Soulmask RCON. Safe intervals depend on command duration, world size, storage performance, server load, provider behavior, and the specific game build. Start with a conservative interval, observe server and disk behavior, and change one variable at a time. Provider panel features, container images, and available RCON commands are version-sensitive, so re-test after updates.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.