instruction: Create a Dockerfile for Node.js with production best practices
output: ```dockerfile
  from other Pods or processes on the same Node.
  Restricted Fields
  
  spec.securityContext.sysctls[*].name
  
  Allowed Values
  
  /nil
  kernel.shm_rmid_forced
  net.ipv4.ip_local_port_range
  net.ipv4.ip_unprivileged_port_start
  net.ipv4.tcp_syncookies
  net.ipv4.ping_group_range
  net.ipv4.ip_local_reserved_ports (since Kubernetes 1.27)
  net.ipv4.tcp_keepalive_time (since Kubernetes 1.29)
  net.ipv4.tcp_fin_timeout (since Kubernetes 1.29)
  net.ipv4.tcp_keepalive_intvl (since Kubernetes 1.29)
  net.ipv4.tcp_keepalive_probes (since Kubernetes 1.29)
  
  Restricted
  The Restricted policy is aimed at enforcing current Pod hardening best practices, at the
  expense of some compatibility. It is targeted at operators and developers of security-critical
  applications, as well as lower-trust users. The following listed controls should be
  enforced/disallowed:
  
  Note: In this table, wildcards (*) indicate all elements in a list. For example,
  spec.containers[*].securityContext refers to the Security Context object for all defined
  containers. If any of the listed containers fails to meet the requirements, the entire pod will
  fail validation.
  
  Restricted policy specification
  
  Control
  Policy
  
  Everything
  ```