instruction: Create a Dockerfile for Node.js with production best practices
output: ```dockerfile
  from other Pods or processes on the same Node.Restricted Fieldsspec.securityContext.sysctls[*].nameAllowed Values/nilkernel.shm_rmid_forcednet.ipv4.ip_local_port_rangenet.ipv4.ip_unprivileged_port_startnet.ipv4.tcp_syncookiesnet.ipv4.ping_group_rangenet.ipv4.ip_local_reserved_ports (since Kubernetes 1.27)net.ipv4.tcp_keepalive_time (since Kubernetes 1.29)net.ipv4.tcp_fin_timeout (since Kubernetes 1.29)net.ipv4.tcp_keepalive_intvl (since Kubernetes 1.29)net.ipv4.tcp_keepalive_probes (since Kubernetes 1.29)RestrictedThe Restricted policy is aimed at enforcing current Pod hardening best practices, at the
  expense of some compatibility. It is targeted at operators and developers of security-critical
  applications, as well as lower-trust users. The following listed controls should be
  enforced/disallowed:Note:In this table, wildcards (*) indicate all elements in a list. For example,
  spec.containers[*].securityContext refers to the Security Context object for all defined
  containers. If any of the listed containers fails to meet the requirements, the entire pod will
  fail validation.Restricted policy specificationControlPolicyEverything
  ```