Renew fails with error 403 on nginx reverse proxy

in the/etc/letsencrypt/renewal/<your cert name>.conf what does the

authenticator = standalone
installer = None

stands for?