Out of curiosity, is it risky to publicly reveal the name of the file, mysql, web, and email server? Or is a matter that should be kept private?
The web and email server names can’t be completely hidden from someone looking around. As long as the servers (and your site) are secure, I’d most worry about a DDoS.
If the l337 h4x0rz are out to get you they don’t need you to tell them that kind of information. Best practices are to use good passwords Lik3#tH15 and, most importantly, to use different passwords for each aspect of your accounts (panel, email, domain user, mysql, etc.)
I use an old freeware called Password Keeper to remember all those cR4zY pAsSw0Rds for me