From 3331c31d2265ea38e00694d5c18376e37b9d6f18 Mon Sep 17 00:00:00 2001
From: b3ni15 <ballobeni08@gmail.com>
Date: Sun, 21 Dec 2025 00:21:06 +0100
Subject: [PATCH] Update wallet route to use environment variables for deposit
 limits

---
 .env.example         | 2 ++
 src/routes/wallet.js | 6 ++++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.env.example b/.env.example
index 7408880..a339b8b 100644
--- a/.env.example
+++ b/.env.example
@@ -21,3 +21,5 @@ MAX_BET=500
 ROUND_START_DELAY_MS=3000
 ROUND_RESET_DELAY_MS=5000
 TURN_TIME_MS=15000
+MIN_DEPOSIT=175
+MAX_DEPOSIT=1000
diff --git a/src/routes/wallet.js b/src/routes/wallet.js
index 7e1e990..10a8077 100644
--- a/src/routes/wallet.js
+++ b/src/routes/wallet.js
@@ -7,6 +7,8 @@ const router = Router();
 const stripe = new Stripe(process.env.STRIPE_SECRET_KEY || '', {
   apiVersion: '2024-06-20'
 });
+const MIN_DEPOSIT = Number(process.env.MIN_DEPOSIT || 175);
+const MAX_DEPOSIT = Number(process.env.MAX_DEPOSIT || 1000);
 
 function ensureStripeConfigured(res) {
   if (!process.env.STRIPE_SECRET_KEY) {
@@ -23,8 +25,8 @@ router.post('/api/wallet/deposit-intent', authMiddleware, async (req, res) => {
     }
 
     const amount = Number(req.body.amount);
-    if (!Number.isFinite(amount) || amount < 50 || amount > 100) {
-      return res.status(400).json({ error: 'A feltoltes 50 es 100 Ft kozott lehet.' });
+    if (!Number.isFinite(amount) || amount < MIN_DEPOSIT || amount > MAX_DEPOSIT) {
+      return res.status(400).json({ error: `A feltoltes ${MIN_DEPOSIT} es ${MAX_DEPOSIT} Ft kozott lehet.` });
     }
 
     const paymentIntent = await stripe.paymentIntents.create({