ZeroCheat Setup Guide

1. What You Buy

1. ZeroCheat Server and ZeroCheat Client mod package.
2. Hosted browser control panel with AntiCheat court, live map, command queue, evidence viewer, and restore center.
3. Feature toggles per customer server. Customers tune their own server; ZeroCheat super admin controls licensing, global tools, products, and R2 policy.
4. Base restore, vehicle restore, and unknown-cause death/corpse restore.
5. Optional adapters for admin mods, group mods, base mods, trader/garage mods, and vehicle lock/key mods.

2. Feature Toggles

Feature Toggles is the source of truth for what a customer can enable on their server. A detector that is not listed here should not create paid-feature risk.

Combat

Movement

Camera

Loot

Aim

Identity

Admin Power

Ballistics

Example API payload:

{
    "version": 1,
    "toggles": {
        "combat.infinite_ammo": true,
        "combat.fast_fire": true,
        "combat.no_recoil": false,
        "movement.speed": true,
        "movement.vehicle_speed": true,
        "movement.teleport": true,
        "movement.undermap": true,
        "camera.freecam": true,
        "loot.remote_loot": true,
        "loot.dupe": false,
        "aim.snap_aim": false,
        "aim.skeleton_esp": false,
        "aim.triggerbot": false,
        "aim.silent_aim": false,
        "identity.namespoof": true,
        "admin_power.godmode": true,
        "admin_power.heal": true,
        "admin_power.spawn": true,
        "admin_power.invisible": true,
        "ballistics.wallbang": true,
        "ballistics.notree_treebang": true,
        "ballistics.curve_bullet": false,
        "learning.raw": true,
        "learning.cloud_r2": true
    },
    "serverRuntimeHint": "The DayZ server applies these toggles on the next config poll/reload."
}

3. Install & Optional Mods

ZeroCheat should run on vanilla DayZ. Optional integrations are auto-detected when the server has them installed. Load optional mods before ZeroCheat when your server uses them.

1. Upload @ZeroCheat / the delivered package to the DayZ server.
2. Load your normal server mods first, then ZeroCheat.
3. Start once so $profile:ZeroCheat JSON files are generated.
4. Stop, edit JSON, start again.
5. Use !zcreload for supported hot-reload JSON when testing.

-mod=@CF;@YourAdminMod;@YourGroupMod;@YourTraderMod;@ZeroCheat
-servermod=@ZeroCheat_Server

If your server does not use an optional mod, do not install it only for ZeroCheat. ZeroCheat falls back to vanilla/context-light logic.

4. WebControl JSON ($profile:ZeroCheat/WebControl/config.json)

Folder Path: $profile:ZeroCheat/WebControl/

File Name: config.json (Generated automatically on first server boot)

Note: API URLs automatically use your current Web Panel domain (https://zero-cheat.com). If you change your domain name or web server IP in the future, these endpoints automatically adapt!

{
  "ZC_WebApiUrl": "https://zero-cheat.com/api",
  "IdentityToken": "YOUR_PRIVATE_IDENTITY_TOKEN_FROM_WEB_PANEL",
  "RegistrationToken": "",
  "GameServerId": "YOUR_GAME_SERVER_ID_FROM_WEB_PANEL",
  "CommandPollIntervalMs": 2000,
  "EventBatchIntervalMs": 1000,
  "LivePositionIntervalMs": 1000,
  "MaxEventsPerBatch": 50,
  "RequestTimeoutSeconds": 10,
  "LogVerbose": false,
  "DryRun": false,
  "LearningLocalEnabled": true,
  "LearningWebUploadEnabled": false,
  "LearningCapPerSteamId": 5,
  "LearningCloudUploadEnabled": true,
  "LearningCloudEndpointPath": "/api/learning-batch.php",
  "LearningCloudBatchIntervalMs": 60000,
  "LearningCloudMaxBatchLines": 1000,
  "LearningCloudMaxPendingLines": 20000
}

4.1 Remote Admin Commands & Live Inventory Inspection

The Web Control Panel communicates bidirectionally with the DayZ Game Server via HTTP polling (poll.php & result.php). Admins can execute the following remote actions live from the Web Panel or mobile phone:

5. Core System JSON ($profile:ZeroCheat/Configs/System.json)

Folder Path: $profile:ZeroCheat/Configs/

File Name: System.json (Generated automatically on first server boot)

{
  "zc_SystemEnable": true,
  "zc_Debug": false,
  "zc_CooldownModulesSends": 3.0,
  "zc_TeleportPlayerToPrison": false,
  "zc_PrisonCoordinate": "50 0 50",
  "zc_RollbackIllegalPlayerTeleport": false,
  "zc_AimDetectorEnable": true,
  "zc_AimIgnoreExpansionParty": true,
  "zc_Admins": [],
  "zc_AimIgnorePairs": []
}

6. CombatMaster Engine JSON ($profile:ZeroCheat/CombatMaster/config.json)

Folder Path: $profile:ZeroCheat/CombatMaster/

File Name: config.json (Generated automatically on first server boot)

{
  "enabled": true,
  "checkFastFire": true,
  "checkInfiniteAmmo": true,
  "checkNoRecoil": false,
  "minRecoilThreshold": 0.04,
  "infiniteAmmoVerifyDelayMs": 250,
  "infiniteAmmoStrikeThreshold": 3,
  "minTimeBetweenShotsMs": 55,
  "fastFireStrikeThreshold": 3,
  "fastFireToleranceMs": 25,
  "fastFireSessionGapMs": 5000,
  "fastFireMinimumLegalMs": 45,
  "reportCooldownMs": 15000,
  "fastFireRiskDelta": 15,
  "infiniteAmmoRiskDelta": 35,
  "noRecoilRiskDelta": 5
}

7. Movement, Speed & Freecam JSON

Folder Path: $profile:ZeroCheat/Configs/

Files: SpeedDetector.json and FreecamDetector.json

// SpeedDetector.json
{
  "zc_SpeedDetectorEnable": true,
  "zc_SpeedSampleInterval": 0.25,
  "zc_SpeedGraceMs": 20000,
  "zc_MaxSpeedStand": 50.0,
  "zc_MaxSpeedCrouch": 15.0,
  "zc_MaxSpeedProne": 8.5,
  "zc_MaxTeleportXY": 35.0,
  "zc_MaxTeleportZ": 5.0,
  "zc_WebhookEnable": true,
  "zc_WebhookDiscord": "Your Discord Webhook URL Here"
}

// FreecamDetector.json
{
  "zc_FreecamDetectorEnable": true,
  "zc_FreecamCheckInVehicle": false,
  "zc_FreecamMaxDistance_1PP": 3.0,
  "zc_FreecamMaxDistance_3PP": 5.0,
  "zc_WebhookEnable": true,
  "zc_WebhookDiscord": "Your Discord Webhook URL Here"
}

8. Object & Remote Loot Manipulation JSON ($profile:ZeroCheat/Configs/ManipuleDetector.json)

Folder Path: $profile:ZeroCheat/Configs/

File Name: ManipuleDetector.json (Generated automatically on first server boot)

{
  "zc_IsManipuleDetectorEnable": true,
  "zc_RollbackObject": true,
  "zc_VanillaEnabled": true,
  "zc_CheckManipule_Item": true,
  "zc_CheckManipule_Car": true,
  "zc_CheckManipule_Base": true,
  "zc_CheckManipule_House": true,
  "zc_RadarEnabled": true,
  "zc_LootBubbleScannerEnable": true,
  "zc_AdvancedLootEnable": true,
  "zc_LootOuterScanRadius": 20.0,
  "zc_LootLegalPickupRadius": 5.0,
  "zc_MaxVacuumPullDistance": 150.0,
  "zc_LivePlayerStealLegalDistance": 5.0,
  "zc_CorpseLootLegalDistance": 6.0,
  "zc_DeleteVacuumLootItems": true,
  "zc_QuarantineVacuumLootSeconds": 300.0,
  "zc_RadarWatchList_Item": ["WoodenCrate", "SeaChest", "Barrel_Green", "CarTent", "LargeTent", "UndergroundStash"],
  "zc_RadarWatchList_Cars": ["CivilianSedan", "OffroadHatchback", "Truck_01_Covered", "Boat_01_Black"],
  "zc_RadarWatchList_Bases": ["Fence", "Watchtower", "TerritoryFlag"]
}

9. Admin Power & Abuse Audit JSON ($profile:ZeroCheat/Configs/AdminPowerDetector.json)

Folder Path: $profile:ZeroCheat/Configs/

File Name: AdminPowerDetector.json (Generated automatically on first server boot)

{
  "zc_AdminPowerDetectorEnable": true,
  "zc_CheckGodmode": true,
  "zc_CheckIllegalHeal": true,
  "zc_CheckObjectSpawn": true,
  "zc_CheckInvisible": true,
  "zc_GodmodeStrikeThreshold": 3,
  "zc_DamageVerifyDelayMs": 350,
  "zc_HealWatchHealthJump": 20.0,
  "zc_InvisibleWatchRadius": 80.0
}

Field names may vary by build; use the generated ZeroCheat_Config_Guide.RD on the server as the final local reference. The policy is stable: god/heal/spawn/invisible must be judged as their own admin-power evidence, not mixed with speed/aim/loot.

10. Learning / R2 Policy

ZeroCheat should not upload everything forever. SQL is the court desk. R2 is the brain/archive.

{
  "learning": {
    "r2_prefix": "dulieuhoc",
    "upload_r2": true,
    "local_mirror_path": "",
    "cloud_batch": {
      "max_records_per_request": 5000,
      "flush_files_per_request": 20,
      "flush_records_per_request": 10000,
      "inbox_retention_hours": 24
    }
  },
  "evidence": {
    "clip_retention_days": 7,
    "upload_only_when_case_exists": true,
    "cache_item_thumbnail_once_per_classname": true
  }
}

11. Restore

Restore must be strict. A player claim should be checked against evidence: owner, group, item contents, position, direction/orientation, last interaction, loss reason, and whether the case was already restored.

• Base restore should place containers/items back at saved position/orientation when clear. If the spot is occupied, restore next to it and log the offset.
• Vehicle restore should use driver, lock/key, garage/trader, owner, and last known vehicle state. Normal crashes and combat losses are not restore reasons.
• Unknown-cause death restore should exclude suicide, valid PvP kill, zombie kill, drowning, falling, vehicle crash, and normal DayZ danger.
• After restore, mark the entry restored or remove it from the active loss queue to prevent dupe payout.

12. Team / Group Rules

Only features that can confuse teammate behavior should use team/group ignore. Movement, teleport, under-map, freecam, admin-power, and impossible ammo still matter regardless of team.

13. Test Checklist

1. Start server once and confirm $profile:ZeroCheat/Logs has a boot marker.
2. Open Feature Toggles and enable only the feature being tested.
3. Test normal behavior first. Confirm no alert.
4. Test the suspicious behavior. Confirm one readable case, not spam.
5. Open AntiCheat court and confirm Count/grouping, details, action buttons, and 3D Evidence only when a real R2 clip exists.
6. Check SQL/R2 growth after testing. Normal client metrics, AFK, duplicate heartbeat, and debug payloads must not grow forever.

14. Production Hardening

• Keep secrets in web config or encrypted/server-side code. Do not expose R2 keys to customers in plain JSON.
• Use feature licenses so a customer buying one detector does not unlock every detector or every R2 learning subject.
• Keep SQL retention enabled. SQL should hold active cases and indexes, not every raw event forever.
• Keep heavy R2 evidence clips on TTL. Seven days is a good default unless a case is manually preserved.
• Do not enable watch-first hard features as heavy punishment until the server has clean learning and admin review workflow.