This would be best @params[:site]['secure_ip'] || '*'

so that sites don't need to define '*', instead using it by default. You probably then don't need the attribute being set by default for the apache configuration.