Rusty Heathens ModGuard

Rusty Heathens ModGuard is the approved-client-mod guard used by the Heathens' Haven Valheim server.

Player install

Use Thunderstore Mod Manager or r2modman and install/update this mod in the same profile used for Heathens' Haven.

The same ModGuard version must be installed on the server and connecting player clients.

What 0.2.1 changes

• The approved-mod policy is now server-config only.
• No player allowlist is baked into the DLL.
• No admin-only mod list is baked into the DLL.
• No fallback admin account IDs are baked into the DLL.
• Bare BepInEx plugin GUIDs in the server config allow any version, so routine mod updates do not require a ModGuard rebuild.
• Exact guid@version pins remain available only when the server owner intentionally uses them.
• Existing 0.2.0 config entries are preserved while old version suffixes are removed during the generic config-schema upgrade.
• Approved mods remain optional; a player does not have to install every allowed plugin.
• Unapproved loaded plugins are denied in Enforce mode.
• Admin-only plugins remain blocked for normal players.

Server owner

Edit only the server's:

BepInEx/config/com.rustylasergaming.modguard.cfg

The important entries are:

• AllowedForPlayers
• AdminOnly
• AdminSteamIds

Use bare plugin GUIDs for normal operation. Updating that config changes policy without rebuilding ModGuard.

Important

This is a controlled-profile compatibility/mod-policy guard for normal BepInEx clients. It is not tamper-proof anti-cheat attestation; a deliberately modified client can falsify a client-side report.

Changelog

0.3.0 - 2026-10-07

• Added controller/gamepad audit reporting inside the ModGuard Thunderstore package.
• Reports Unity legacy joystick/controller names.
• Reports Unity Input System device details when available: display/product name, manufacturer, interface, layout, device ID, vendor/product IDs.
• Reports whether controller activity was observed.
• Added server log output beginning with [RHCA] CONTROLLER_AUDIT.
• Does not block or kick for controller use yet.
• Does not collect controller serial numbers.
• Preserves ModGuard 0.2.2 approved-mod admission behavior.
• Requires com.rustylasergaming.controlleraudit in the server AllowedForPlayers policy.

0.2.2 - 2026-10-04

• Start admission deadlines when peers are ready for routed RPC.
• Retry client reports until the connected server acknowledges them.
• Snapshot the peer list before enforcement to tolerate disconnects during iteration.
• Change the default timeout to 60 seconds and upgrade the old 20-second default.
• Preserve configured allowlists, admin IDs and intentional pins after the earlier migration.
• Update the package dependency to BepInExPack Valheim 5.4.2351.

0.2.1

• Removed the packaged player allowlist from Plugin.cs.
• Removed the packaged admin-only plugin list from Plugin.cs.
• Removed packaged fallback admin account IDs from Plugin.cs.
• Server com.rustylasergaming.modguard.cfg is now the only policy source.
• Bare plugin GUIDs allow any version so normal Thunderstore updates do not cause version-lock failures.
• Exact guid@version pins remain supported when intentionally configured.
• Kept Enforce/Audit/Disabled behavior, optional approved mods, admin-only handling, duplicate-plugin detection, report hashing, and server-side admission checks.