Dockerfile

@@ -17,6 +17,8 @@ COPY --from=deb_extractor /dpkg /
 # Configure dot plugins
 RUN ["dot", "-c"]
 
+# Use a non-root user: slightly more secure (defense in depth)
+USER nobody
 WORKDIR /
 EXPOSE 7443
 ENTRYPOINT ["/pprofweb"]

README.md

@@ -1,22 +1,16 @@
 # PProf Web UI
 
-[Go pprof profiler web UI](https://github.com/google/pprof).
+This is a hacky experiment that serves the [Go pprof profiler web UI](https://github.com/google/pprof). You can upload pprof files then view them without installing anything. See [my blog post for some additional details](https://www.evanjones.ca/pprofweb.html).
 
-You can upload pprof files then view them without installing anything.
+Try it: https://pprofweb.evanjones.ca/
-
-
-you can also share these profiles with other people
-
-
-Try it: https://pprof.aaaaa.news
 
 
 ## Run Locally
 
 docker build . --tag=pprofweb
-docker run --rm -ti -p 7443:7443 pprofweb
+docker run --rm -ti --publish=127.0.0.1:8080:8080 pprofweb
 
-Open http://localhost:7443/
+Open http://localhost:8080/
 
 
 ## Check that the container works