Rusty Heathens ModGuard

The approved-client-mod guard used by the Heathens' Haven Valheim server.

Install and update

Install ModGuard 0.3.0 on the server and all connecting player PCs using Thunderstore Mod Manager or r2modman.

0.3.0 includes the controller audit component inside this same Thunderstore package. There is no separate Controller Audit package for players to install.

Keep one active copy of ModGuard. Move earlier manually installed/test copies outside BepInEx/plugins.

What's new in 0.3.0

• Bundles a controller/gamepad audit component with ModGuard.
• Reports controller/gamepad product name when Unity exposes it.
• Reports manufacturer, interface, layout, device ID, and vendor/product IDs when available.
• Reports whether controller activity was observed.
• Sends server log lines beginning with [RHCA] CONTROLLER_AUDIT.
• Does not block controllers yet.
• Does not kick players for controller use yet.
• Does not collect controller serial numbers.
• Preserves the existing ModGuard 0.2.2 admission behavior.

Required server policy update

Because the audit component is a BepInEx plugin inside this package, the server ModGuard policy must allow its GUID:

com.rustylasergaming.controlleraudit

Add that GUID to the server's existing AllowedForPlayers list before players connect with ModGuard 0.3.0.

Do not replace your server policy with a generic packaged allowlist. Your existing server config remains authoritative.

Controller audit

When a player joins, the audit reports what Unity/Valheim can actually see. This helps identify an aftermarket or programmable controller before adding an enforcement rule.

The server log can include:

• legacy Unity joystick/controller name;
• Input System display/product name;
• manufacturer;
• input interface/layout;
• device ID;
• vendor/product IDs when exposed;
• controller activity observed during the session.

Limitation

Steam Input, reWASD, JoyToKey, controller firmware, adapters, or similar software may hide the physical controller model by exposing a generic/virtual controller or by translating controller buttons into keyboard/mouse input.

ModGuard can only report what Unity/Windows exposes to Valheim. Client-side reports are diagnostic and are not tamper-proof attestation.

Existing ModGuard policy

The server config remains the only policy source. Use bare BepInEx plugin GUIDs to allow normal version updates. Exact guid@version pins remain available when deliberately needed.

Approved plugins are optional. Unapproved plugins and normal players using admin-only plugins are denied in Enforce mode. Audit logs results without disconnecting; Disabled turns admission checks off.