diff --git a/blango/__pycache__/__init__.cpython-36.pyc b/blango/__pycache__/__init__.cpython-36.pyc
new file mode 100644
index 0000000000..3d14e70b38
Binary files /dev/null and b/blango/__pycache__/__init__.cpython-36.pyc differ
diff --git a/blango/__pycache__/settings.cpython-36.pyc b/blango/__pycache__/settings.cpython-36.pyc
new file mode 100644
index 0000000000..e331d2494f
Binary files /dev/null and b/blango/__pycache__/settings.cpython-36.pyc differ
diff --git a/blango/__pycache__/urls.cpython-36.pyc b/blango/__pycache__/urls.cpython-36.pyc
new file mode 100644
index 0000000000..4172e77a53
Binary files /dev/null and b/blango/__pycache__/urls.cpython-36.pyc differ
diff --git a/blango/__pycache__/wsgi.cpython-36.pyc b/blango/__pycache__/wsgi.cpython-36.pyc
new file mode 100644
index 0000000000..711726c6da
Binary files /dev/null and b/blango/__pycache__/wsgi.cpython-36.pyc differ
diff --git a/blango/settings.py b/blango/settings.py
index f9209bef27..6d32909744 100644
--- a/blango/settings.py
+++ b/blango/settings.py
@@ -11,6 +11,7 @@
 """
 
 from pathlib import Path
+import os
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
@@ -25,7 +26,14 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = ['*']
+X_FRAME_OPTIONS = 'ALLOW-FROM ' + os.environ.get('CODIO_HOSTNAME') + '-8000.codio.io'
+CSRF_COOKIE_SAMESITE = None
+CSRF_TRUSTED_ORIGINS = ['https://' + os.environ.get('CODIO_HOSTNAME') + '-8000.codio.io']
+CSRF_COOKIE_SECURE = True
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SAMESITE = 'None'
+SESSION_COOKIE_SAMESITE = 'None'
 
 
 # Application definition
@@ -37,16 +45,17 @@
     'django.contrib.sessions',
     'django.contrib.messages',
     'django.contrib.staticfiles',
+    'blog',
 ]
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
-    'django.middleware.csrf.CsrfViewMiddleware',
+#     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
-    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+#     'django.middleware.clickjacking.XFrameOptionsMiddleware',
 ]
 
 ROOT_URLCONF = 'blango.urls'
diff --git a/blog/__init__.py b/blog/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/blog/__pycache__/__init__.cpython-36.pyc b/blog/__pycache__/__init__.cpython-36.pyc
new file mode 100644
index 0000000000..7004a865df
Binary files /dev/null and b/blog/__pycache__/__init__.cpython-36.pyc differ
diff --git a/blog/__pycache__/admin.cpython-36.pyc b/blog/__pycache__/admin.cpython-36.pyc
new file mode 100644
index 0000000000..1acc18c75b
Binary files /dev/null and b/blog/__pycache__/admin.cpython-36.pyc differ
diff --git a/blog/__pycache__/apps.cpython-36.pyc b/blog/__pycache__/apps.cpython-36.pyc
new file mode 100644
index 0000000000..d40fffe776
Binary files /dev/null and b/blog/__pycache__/apps.cpython-36.pyc differ
diff --git a/blog/__pycache__/models.cpython-36.pyc b/blog/__pycache__/models.cpython-36.pyc
new file mode 100644
index 0000000000..0f23bf3ff4
Binary files /dev/null and b/blog/__pycache__/models.cpython-36.pyc differ
diff --git a/blog/admin.py b/blog/admin.py
new file mode 100644
index 0000000000..e8d8cb1fad
--- /dev/null
+++ b/blog/admin.py
@@ -0,0 +1,11 @@
+from django.contrib import admin
+from blog.models import Tag, Post, Comment
+
+# Register your models here.
+
+class PostAdmin(admin.ModelAdmin):
+  prepopulated_fields = {"slug": ("title",)}
+
+admin.site.register(Tag)
+admin.site.register(Post, PostAdmin)
+admin.site.register(Comment)
\ No newline at end of file
diff --git a/blog/apps.py b/blog/apps.py
new file mode 100644
index 0000000000..94788a5eac
--- /dev/null
+++ b/blog/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class BlogConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'blog'
diff --git a/blog/migrations/0001_initial.py b/blog/migrations/0001_initial.py
new file mode 100644
index 0000000000..676f4eb201
--- /dev/null
+++ b/blog/migrations/0001_initial.py
@@ -0,0 +1,39 @@
+# Generated by Django 3.2.5 on 2026-07-29 06:08
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Tag',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('value', models.TextField(max_length=100)),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Post',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('modified_at', models.DateTimeField(auto_now=True)),
+                ('published_at', models.DateTimeField(blank=True, null=True)),
+                ('title', models.TextField(max_length=100)),
+                ('slug', models.SlugField()),
+                ('summary', models.TextField(max_length=500)),
+                ('content', models.TextField()),
+                ('author', models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to=settings.AUTH_USER_MODEL)),
+                ('tags', models.ManyToManyField(related_name='posts', to='blog.Tag')),
+            ],
+        ),
+    ]
diff --git a/blog/migrations/0002_comment.py b/blog/migrations/0002_comment.py
new file mode 100644
index 0000000000..a759b937be
--- /dev/null
+++ b/blog/migrations/0002_comment.py
@@ -0,0 +1,27 @@
+# Generated by Django 3.2.5 on 2026-07-29 07:34
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+        ('contenttypes', '0002_remove_content_type_name'),
+        ('blog', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Comment',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('content', models.TextField()),
+                ('object_id', models.PositiveIntegerField()),
+                ('content_type', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='contenttypes.contenttype')),
+                ('creator', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+        ),
+    ]
diff --git a/blog/migrations/0003_auto_20260729_0851.py b/blog/migrations/0003_auto_20260729_0851.py
new file mode 100644
index 0000000000..6829f21cb0
--- /dev/null
+++ b/blog/migrations/0003_auto_20260729_0851.py
@@ -0,0 +1,25 @@
+# Generated by Django 3.2.5 on 2026-07-29 08:51
+
+from django.db import migrations, models
+import django.utils.timezone
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('blog', '0002_comment'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='comment',
+            name='created_at',
+            field=models.DateTimeField(auto_now_add=True, default=django.utils.timezone.now),
+            preserve_default=False,
+        ),
+        migrations.AddField(
+            model_name='comment',
+            name='modified_at',
+            field=models.DateTimeField(auto_now=True),
+        ),
+    ]
diff --git a/blog/migrations/__init__.py b/blog/migrations/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/blog/migrations/__pycache__/0001_initial.cpython-36.pyc b/blog/migrations/__pycache__/0001_initial.cpython-36.pyc
new file mode 100644
index 0000000000..5e3ca6f95a
Binary files /dev/null and b/blog/migrations/__pycache__/0001_initial.cpython-36.pyc differ
diff --git a/blog/migrations/__pycache__/0002_comment.cpython-36.pyc b/blog/migrations/__pycache__/0002_comment.cpython-36.pyc
new file mode 100644
index 0000000000..f4f874e659
Binary files /dev/null and b/blog/migrations/__pycache__/0002_comment.cpython-36.pyc differ
diff --git a/blog/migrations/__pycache__/0003_auto_20260729_0851.cpython-36.pyc b/blog/migrations/__pycache__/0003_auto_20260729_0851.cpython-36.pyc
new file mode 100644
index 0000000000..73a22bdfa1
Binary files /dev/null and b/blog/migrations/__pycache__/0003_auto_20260729_0851.cpython-36.pyc differ
diff --git a/blog/migrations/__pycache__/__init__.cpython-36.pyc b/blog/migrations/__pycache__/__init__.cpython-36.pyc
new file mode 100644
index 0000000000..c30b907927
Binary files /dev/null and b/blog/migrations/__pycache__/__init__.cpython-36.pyc differ
diff --git a/blog/models.py b/blog/models.py
new file mode 100644
index 0000000000..dff0105f17
--- /dev/null
+++ b/blog/models.py
@@ -0,0 +1,41 @@
+from django.db import models
+from django.conf import settings
+
+from django.contrib.contenttypes.fields import GenericForeignKey
+from django.contrib.contenttypes.models import ContentType
+from django.contrib.contenttypes.fields import GenericRelation
+
+# Create your models here.
+
+class Tag(models.Model):
+    value = models.TextField(max_length=100)
+
+    def __str__(self):
+        return self.value
+
+
+# Move Comment class above Post
+class Comment(models.Model):
+    creator = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE)
+    content = models.TextField()
+    content_type = models.ForeignKey(ContentType, on_delete=models.CASCADE)
+    object_id = models.PositiveIntegerField()
+    content_object = GenericForeignKey("content_type", "object_id")
+    created_at = models.DateTimeField(auto_now_add=True)
+    modified_at = models.DateTimeField(auto_now=True)
+
+
+class Post(models.Model):
+    author = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.PROTECT)
+    created_at = models.DateTimeField(auto_now_add=True)
+    modified_at = models.DateTimeField(auto_now=True)
+    published_at = models.DateTimeField(blank=True, null=True)
+    title = models.TextField(max_length=100)
+    slug = models.SlugField()
+    summary = models.TextField(max_length=500)
+    content = models.TextField()
+    tags = models.ManyToManyField(Tag, related_name="posts")
+    comments = GenericRelation(Comment)
+
+    def __str__(self):
+        return self.title
diff --git a/blog/tests.py b/blog/tests.py
new file mode 100644
index 0000000000..7ce503c2dd
--- /dev/null
+++ b/blog/tests.py
@@ -0,0 +1,3 @@
+from django.test import TestCase
+
+# Create your tests here.
diff --git a/blog/views.py b/blog/views.py
new file mode 100644
index 0000000000..91ea44a218
--- /dev/null
+++ b/blog/views.py
@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.
diff --git a/db.sqlite3 b/db.sqlite3
new file mode 100644
index 0000000000..bc85a9a42b
Binary files /dev/null and b/db.sqlite3 differ