Thank you, Francis.
I modified the client to talk TLS:
// BEFORE
//conn, err := grpc.Dial(*addr, grpc.WithTransportCredentials(insecure.NewCredentials()))
// AFTER
certFile := "/Users/drio/Library/Application Support/Caddy/pki/authorities/local/root.crt"
creds, _ := credentials.NewClientTLSFromFile(certFile, "")
conn, err := grpc.Dial(*addr, grpc.WithTransportCredentials(creds))
And now :
ā go run greeter_client/main.go --addr localhost:443
2023/03/17 09:21:37 Greeting: Hello world