Rusty Heathens ModGuard

Rusty Heathens ModGuard is the approved-client-mod guard used by the Heathens' Haven Valheim server.

Player install

Use Thunderstore Mod Manager or r2modman and install/update this mod in the same profile used for Heathens' Haven.

The same ModGuard version must be installed on the server and on connecting player clients.

What 0.2.0 does

• Runs in Enforce mode after the packaged policy migration.
• Reports loaded BepInEx plugin IDs and versions to the server.
• Allows approved plugins without requiring every optional plugin to be installed.
• Rejects/disconnects players who load an unapproved plugin.
• Supports a separate admin-only plugin list.
• Keeps admin-only tools blocked for normal players.
• Supports optional SHA-256 reporting for readable plugin DLLs.

Heathens' Haven approved player plugins

These are allowed, not required. A player may omit optional mods such as PlantEasily or GammaMod and still pass ModGuard.

• PlantEasily 2.2.2
• ValheimGammaMod 0.1
• Universal Target Portal 1.0.4
• RustyHeathensServerSync 0.1.2
• Rusty Heathens Messenger 0.20.0
• Rusty Heathens QoL 0.5.4
• Rusty Heathens Server QoL 0.5.1

ModGuard itself is ignored by policy version matching.

Admin-only plugins

Only verified admins may use the approved admin-only tools:

• Server Devcommands 1.115
• Infinity Hammer 1.85
• World Edit Commands 1.78

Admin recognition

ModGuard 0.2.0 includes fallback recognition for the designated Heathens' Haven admins.

For admin rights in Valheim and other mods, those accounts must also be present in the server's real adminlist.txt / DatHost admin list. ModGuard does not rewrite that file.

Important

This is a controlled-profile compatibility/mod-policy guard for normal BepInEx clients. It is not tamper-proof anti-cheat attestation; a deliberately modified client can falsify a client-side report.

Changelog

0.3.0 - 2026-10-07

• Added controller/gamepad audit reporting inside the ModGuard Thunderstore package.
• Reports Unity legacy joystick/controller names.
• Reports Unity Input System device details when available: display/product name, manufacturer, interface, layout, device ID, vendor/product IDs.
• Reports whether controller activity was observed.
• Added server log output beginning with [RHCA] CONTROLLER_AUDIT.
• Does not block or kick for controller use yet.
• Does not collect controller serial numbers.
• Preserves ModGuard 0.2.2 approved-mod admission behavior.
• Requires com.rustylasergaming.controlleraudit in the server AllowedForPlayers policy.

0.2.2 - 2026-10-04

• Start admission deadlines when peers are ready for routed RPC.
• Retry client reports until the connected server acknowledges them.
• Snapshot the peer list before enforcement to tolerate disconnects during iteration.
• Change the default timeout to 60 seconds and upgrade the old 20-second default.
• Preserve configured allowlists, admin IDs and intentional pins after the earlier migration.
• Update the package dependency to BepInExPack Valheim 5.4.2351.

0.2.1

• Removed the packaged player allowlist from Plugin.cs.
• Removed the packaged admin-only plugin list from Plugin.cs.
• Removed packaged fallback admin account IDs from Plugin.cs.
• Server com.rustylasergaming.modguard.cfg is now the only policy source.
• Bare plugin GUIDs allow any version so normal Thunderstore updates do not cause version-lock failures.
• Exact guid@version pins remain supported when intentionally configured.
• Kept Enforce/Audit/Disabled behavior, optional approved mods, admin-only handling, duplicate-plugin detection, report hashing, and server-side admission checks.